0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb400, 0x0, 0x0, 0x0) [ 1646.584971][T23590] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1646.638713][T23598] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1646.709458][T23606] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb500, 0x0, 0x0, 0x0) 04:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1646.766248][T23610] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb600, 0x0, 0x0, 0x0) [ 1646.895074][T23625] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb700, 0x0, 0x0, 0x0) 04:45:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1646.940542][T23633] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb800, 0x0, 0x0, 0x0) 04:45:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.068833][T23642] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.115871][T23649] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:45 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb900, 0x0, 0x0, 0x0) 04:45:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.224860][T23661] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xba00, 0x0, 0x0, 0x0) [ 1647.267982][T23668] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.368704][T23678] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xbb00, 0x0, 0x0, 0x0) 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.409422][T23686] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff07, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xbc00, 0x0, 0x0, 0x0) 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.540774][T23701] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1647.570646][T23706] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xbd00, 0x0, 0x0, 0x0) 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.643258][T23717] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.684070][T23725] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xbe00, 0x0, 0x0, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.764365][T23736] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xbf00, 0x0, 0x0, 0x0) 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1647.806924][T23744] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc000, 0x0, 0x0, 0x0) 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc100, 0x0, 0x0, 0x0) [ 1647.919359][T23759] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1647.946035][T23769] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc200, 0x0, 0x0, 0x0) [ 1648.024605][T23777] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc300, 0x0, 0x0, 0x0) [ 1648.094373][T23788] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.160456][T23797] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1648.185267][T23802] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:46 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc400, 0x0, 0x0, 0x0) 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.265401][T23813] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc500, 0x0, 0x0, 0x0) [ 1648.320649][T23824] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc600, 0x0, 0x0, 0x0) 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.424227][T23834] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200026bd7000fedbdf25030000000800020002000000080001000000f800"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1ff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4040) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x40010, r4, 0xfa2c5000) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x2, 0xfffb}, @sack_perm, @timestamp, @window={0x3, 0x6}, @mss={0x2, 0xdb}, @sack_perm, @window], 0x7) 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc700, 0x0, 0x0, 0x0) 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.506370][T23841] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc800, 0x0, 0x0, 0x0) [ 1648.594866][T23862] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.637693][T23869] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc900, 0x0, 0x0, 0x0) 04:45:47 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x1010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000001180)=0xf95, 0x7fffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x2dc1, &(0x7f00000001c0)={0x0, 0x76b9, 0x11, 0x2, 0x2d7}, &(0x7f00005bb000/0x2000)=nil, &(0x7f00002c8000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000006c0)=r3) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x1) r4 = creat(&(0x7f0000000700)='./file0\x00', 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000740)={0x1, 0x100, @status={[0x1f, 0x1, 0x7, 0x5, 0x3f, 0x1]}, [0x58, 0x7ff, 0x6, 0x7, 0xffff, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x5, 0x1, 0x0, 0x7fff, 0x76, 0x5, 0x6, 0x1, 0x8, 0x4, 0x10001, 0x100000000, 0x7, 0x1000, 0xff, 0xdaa2, 0x8000, 0x7, 0x748a96ae, 0x4e5, 0x7, 0xffffffff, 0x101, 0x3, 0x401, 0x4, 0x6, 0x100000001, 0x4, 0x7, 0x3, 0x6, 0x8, 0x8, 0x9, 0x7, 0x6, 0x8001, 0x6, 0x5, 0xf21, 0x5, 0x80000000, 0xff, 0x3f, 0xfffffffffffffffe, 0x2, 0x9, 0x9, 0x7, 0x7f, 0x100000000, 0x4, 0x0, 0x7fffffff]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000180)=0xc2, 0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x0, 0x6, 0x6, 0x0, 0x80, 0x3100, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x224, 0x80000000}, 0x200, 0x9, 0x101, 0x4, 0x8, 0x46380e6b, 0x800, 0x0, 0xc217, 0x0, 0x1}, 0x0, 0x9, r0, 0xb) 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xca00, 0x0, 0x0, 0x0) 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.753296][T23888] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.809884][T23894] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xcb00, 0x0, 0x0, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xcc00, 0x0, 0x0, 0x0) 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1648.924892][T23907] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x10001, 0xfff) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{0x443, 0x4, 0xfb, 0x5}, {0x6860, 0x20, 0x31, 0x3}, {0x7fff, 0x80, 0x0, 0x8}, {0x1, 0x1, 0x8a, 0xdf}, {0x1, 0x40, 0xf7, 0x101}, {0x0, 0x4, 0x40, 0xffffff01}]}) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xcd00, 0x0, 0x0, 0x0) 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x15180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.013997][T23915] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xce00, 0x0, 0x0, 0x0) 04:45:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) flock(r0, 0x4) set_mempolicy(0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x11, 0x0, "bf51ca5da273452cebf3d9d3ad7cb72b8c1a1e6d5a75c936780673ddc2f86176ce86acc88bf812b2fbb2e958963d97a755019c9d6e1cb4aa63ff80ec3196e8dc5b7dc2e864a0610ba1b8fa5f3e7eaa71"}, 0xd8) r3 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r3, 0x9bb7a000) [ 1649.116466][T23936] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xf827}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.165090][T23946] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:47 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xcf00, 0x0, 0x0, 0x0) 04:45:47 executing program 0: set_mempolicy(0x1, 0x0, 0xffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd000, 0x0, 0x0, 0x0) [ 1649.293863][T23961] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.342502][T23972] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000300)={[{@huge_always}, {@size={'size', 0x3d, [0x31, 0x33, 0x25, 0x33]}}], [{@euid_gt={'euid>', r0}}, {@permit_directio}]}) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd100, 0x0, 0x0, 0x0) [ 1649.452351][T23980] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.501071][T23987] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd200, 0x0, 0x0, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010700010028290000140006000000000000000000290781c33e2cb8b26e0c8c80570d5c0000ffffffffffff14000500fe80000000000000000007c81ecf55ad8f8ba5b6200000000000bb0800020005000000000000"], 0x4c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000000), 0x501}, 0x8, 0x0, 0x0, 0x3}, r4, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 0: set_mempolicy(0x0, 0x0, 0x8000) r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x81, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="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", 0xfa, 0x3}, {&(0x7f0000000380)="587810f51513f4be2538fe8d722a8a9fbd119990d52263851a56d3d944", 0x1d, 0x340f}], 0x3001002, &(0x7f0000000440)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x39, 0x3a, 0x33, 0x39]}}}}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {}, {@huge_always}, {@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x8}}], [{@smackfsroot={'smackfsroot', 0x3d, '\\$}/'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x39, 0x63, 0x65, 0x33, 0x37, 0x30], 0x2d, [0x38, 0x37, 0x34, 0x62], 0x2d, [0x33, 0x34, 0x5], 0x2d, [0x64, 0x64, 0x32, 0x34], 0x2d, [0x39, 0x38, 0x1, 0x38, 0x63, 0x33, 0x66, 0x63]}}}]}) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xc4) recvfrom$unix(r1, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x4, @perf_bp, 0x1497a, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x0) [ 1649.623335][T24003] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1649.640936][T24005] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd300, 0x0, 0x0, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x4a830, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.698762][T24013] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd400, 0x0, 0x0, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/5, 0x5}, {&(0x7f0000000540)=""/48, 0x30}], 0x8, 0xffffff8c, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x140) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.826163][T24026] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x24400, 0x0) close(r0) 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1649.886197][T24032] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd500, 0x0, 0x0, 0x0) 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) futex(&(0x7f0000000040), 0x4, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x10, r0, 0xc2c51000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x4000010, r0, 0xb8239000) [ 1649.962830][T24047] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd600, 0x0, 0x0, 0x0) 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.019756][T24059] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd700, 0x0, 0x0, 0x0) 04:45:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r0, 0x1b9e4000) 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd800, 0x0, 0x0, 0x0) [ 1650.146129][T24074] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd900, 0x0, 0x0, 0x0) 04:45:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 0: set_mempolicy(0x3, 0x0, 0x5a9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:48 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xda00, 0x0, 0x0, 0x0) 04:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.191003][T24094] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xdb00, 0x0, 0x0, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.294793][T24112] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1650.323845][T24120] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0xf4, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xdc00, 0x0, 0x0, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '.\x00'}) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xdd00, 0x0, 0x0, 0x0) [ 1650.411592][T24135] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1650.448341][T24146] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x40) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xde00, 0x0, 0x0, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.564978][T24160] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xdf00, 0x0, 0x0, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.623739][T24170] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000040)=0x6, 0x7) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe000, 0x0, 0x0, 0x0) [ 1650.709370][T24188] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x306, @multicast}, 0x24, {0x2, 0x4e24, @broadcast}, 'veth1_vlan\x00'}) getsockopt(r0, 0x460b, 0x2, &(0x7f0000000100)=""/230, &(0x7f0000000040)=0xe6) sendto$inet(r0, &(0x7f0000000280)="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", 0x1000, 0x400c0, &(0x7f0000001280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.755538][T24191] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe100, 0x0, 0x0, 0x0) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe200, 0x0, 0x0, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wg1\x00', &(0x7f0000000100)=@ethtool_dump={0x3e, 0x2, 0x6, 0xc8, "93bb45ff92cb0d1ae3033e404f86aafc05642f5e44bbe291b6e39a8058a9ec8caef6580174807752304c35e60385a47956f5ba5770332f63c283283683d45e1324cbdc174ead50f4bbf8f92038df9d8d70c8548ffb0086b5394716916689092ca8a2754044341092b8885c26b751272fcce64da3108f67bdad80ae873dc6b8178ba036d257dc5a02df66184f16041f358ca94f56313fec0bac617b3685ed21590c3e62dc0a4ac3d922709bfaeee2d60a45aad708282366208cc36d63b4b54714cd37d12243a8eb8f"}}) set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.833658][T24208] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1650.861434][T24212] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe300, 0x0, 0x0, 0x0) 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.942315][T24223] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1650.965046][T24234] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.043369][T24242] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x2, 0x6, 0xfffffe77, 0x81, 0x1ff]}, &(0x7f0000000040)=0x54) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe400, 0x0, 0x0, 0x0) 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.096344][T24253] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe500, 0x0, 0x0, 0x0) [ 1651.189784][T24270] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe600, 0x0, 0x0, 0x0) [ 1651.271484][T24276] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0xc000, &(0x7f0000000040)=0x1b, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000100)=0xfffffffffffff35b, 0x101) set_mempolicy(0x1, &(0x7f0000000140)=0x2c3eeba6, 0x5) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe700, 0x0, 0x0, 0x0) 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.342819][T24295] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1651.368022][T24300] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.456420][T24316] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe800, 0x0, 0x0, 0x0) 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x2e, 0xfffffffffffffe6f) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.498670][T24322] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe900, 0x0, 0x0, 0x0) [ 1651.577889][T24337] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xea00, 0x0, 0x0, 0x0) [ 1651.618673][T24341] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.664533][T24348] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xeb00, 0x0, 0x0, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.705171][T24355] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.771494][T24367] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xec00, 0x0, 0x0, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xe83a1b0000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.815136][T24373] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x1010, r0, 0x171a8000) 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xed00, 0x0, 0x0, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xee00, 0x0, 0x0, 0x0) [ 1651.888616][T24388] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1651.921688][T24395] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.972779][T24405] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xef00, 0x0, 0x0, 0x0) 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, 0xb1b3, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x444}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.046434][T24412] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf000, 0x0, 0x0, 0x0) 04:45:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0x80) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x71) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.154492][T24428] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf100, 0x0, 0x0, 0x0) 04:45:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.197171][T24442] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf200, 0x0, 0x0, 0x0) 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.277114][T24448] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x10000, 0x6) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x12, 0x0, 0x2111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x4, 0x0, 0x6f8f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000001240)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000140)="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", 0x1000, 0x8001, 0x0, 0x1, r0}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000001180)="68e28390c4be0f6ea99f4d866752a395f665b9da9764d31f4c3bb54b69263acef22d99795e2a6fabcc678cbee0e28a61bc03ac3b79dd42f18a994ef45b7d4df2c6b23dc6fcb7b05adcf45fd1f8cd471e5e102cec1fcf525a129d5d408adff80289e77da215d2d3476a8313a78fd9f60c9cc265a7c2220ca4e063befde425ec", 0x7f, 0x9, 0x0, 0x0, r0}]) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='[\x00') 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xff07000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.316754][T24458] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff070000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf300, 0x0, 0x0, 0x0) 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x27000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf400, 0x0, 0x0, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000001c0)='loginuid\x00') perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x391b41, 0x152) openat(r4, &(0x7f0000000100)='./file0\x00', 0x202c0, 0x40) set_mempolicy(0x2, &(0x7f0000000040)=0x39, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) r5 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) [ 1652.408889][T24475] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1652.441999][T24484] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xff47000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.486239][T24486] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf500, 0x0, 0x0, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='/#\xfc\'^]\x0e{}#[\x00', &(0x7f0000000140)='-\\\x00', &(0x7f0000000180)=',\x00', &(0x7f00000001c0)='%+#$}\xc2{\x00', &(0x7f0000000200)='{!\x00', &(0x7f0000000240)='{::\xed\x00', &(0x7f0000000280)='{:\x00', &(0x7f00000002c0)='}%\x00'], &(0x7f00000004c0)=[&(0x7f0000000340)='+(\x00', &(0x7f0000000380)='[!\x00', &(0x7f00000003c0)='$)-.I{\\\x00', &(0x7f0000000400)='@\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)=']+\x00'], 0x800) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.535581][T24495] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf600, 0x0, 0x0, 0x0) [ 1652.608351][T24510] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf700, 0x0, 0x0, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.650156][T24514] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000040)=""/46, 0x2e}], 0x4, 0x1f, 0x7) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.740611][T24527] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @a}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq', 0x202041, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf800, 0x0, 0x0, 0x0) 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.788252][T24539] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf900, 0x0, 0x0, 0x0) 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.860045][T24545] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.908583][T24557] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xfa00, 0x0, 0x0, 0x0) 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1652.975746][T24568] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xfb00, 0x0, 0x0, 0x0) 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.034135][T24575] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4fc, 0x0, 0x601, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb122}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcf29}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc291}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcedf25d}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3276}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @remote, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1ff, @private2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x104}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) set_mempolicy(0x1, 0x0, 0x0) pipe2(&(0x7f00000006c0), 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xfc00, 0x0, 0x0, 0x0) 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.109529][T24592] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xfd00, 0x0, 0x0, 0x0) 04:45:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockname$unix(r0, 0xffffffffffffffff, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1653.170567][T24600] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:51 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xfe00, 0x0, 0x0, 0x0) 04:45:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.256575][T24617] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xff00, 0x0, 0x0, 0x0) 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80000) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140)=0x11484e1b, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, r2, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x40, 0x0, 0x4, 0x0, 0x2, 0x1, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4000000, 0x1, @perf_config_ext={0x0, 0x3}, 0x1f444, 0x7, 0x297, 0x5, 0xb12d, 0x2, 0x0, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x10, r3, 0x8) [ 1653.304623][T24626] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xff7b, 0x0, 0x0, 0x0) [ 1653.365200][T24636] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xff8f, 0x0, 0x0, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000040)=0x1000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='timerslack_ns\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000180)=0x5, 0x7) set_mempolicy(0x4003, &(0x7f0000000140)=0x5, 0x109ac) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.426745][T24645] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000200), 0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x81, 0x38, 0x1, 0x0, 0x199, 0x400, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x3f, 0x7}, 0x2200, 0x6, 0x2, 0x3, 0x1, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x3f}, 0x0, 0x5, r1, 0x2) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='}]\x00', &(0x7f0000000100)='./file0\x00', r0) set_mempolicy(0x8000, &(0x7f00000001c0)=0x2, 0x6) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8f000, 0x0, 0x0, 0x0) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000100)=0x3, 0x200) set_mempolicy(0x2, &(0x7f0000000140)=0x7, 0x80000001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000040)=0xfdf, 0x3ff) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x4386) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x400000, 0x0, 0x0, 0x0) [ 1653.547892][T24670] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0xfa754000) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.622515][T24680] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x80510100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x600000, 0x0, 0x0, 0x0) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.734478][T24701] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x80ffff, 0x0, 0x0, 0x0) 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.796178][T24710] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc0ffff, 0x0, 0x0, 0x0) [ 1653.884707][T24725] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1653.942088][T24731] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf00800, 0x0, 0x0, 0x0) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf0ff7f, 0x0, 0x0, 0x0) [ 1654.061518][T24749] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x6e2226) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="835bc555f1ff", @ANYRES32, @ANYBLOB="1f"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x103, 0x6, 0x4, 0x0, 0x7, 0x3, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8, 0x59]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0xc845) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x1044, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xda, 0x3}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "7f267d4a6e4bb734988fa8238b19380395b8c658716db8e34116b37870596f52558586aecd96e085d3d58816f26db68cdc5c812a92cbef0e331a1466d38a42627c057736aa1ee97f3e6aaca7e9ab122f428a2447071ddad2a0ec792bcca7bf2f4cec4354fbbe9f28b5774b105ee1b352e5cab2496579953e6baa3444d6a8fdff05942330450069ae05fb4f6f1d1e59ee078f9309c78d675a878f0ab87234282abf2cd9f51a83ede9c241dd78a60a1b5bc4c6106342d606cd929ed04d52f00162842d7b9b1f749c8ff809453b628fde8773ec708656b6bd1d21d9aace7130577e71cd0a04e4a064e5db42749c489987b336a7b567c3b611290be928cafe4ca1ccc110bddfe18a8b1b68ddb1bc2de178f1c7abaff923bbed58105a790f8e22ce4ec299e71092918935c959c9e55d796da45e9f09cfa4f558596fd21be2ae03f11e4aae86c63fe00268b7ecb1eadabf0e8279378bc03384300afe118bed1d84c31333e9f3beb0923e8fdb243ab2b4b1b5855ffa36978e07a95bc9a1f8e53d6859f8fa05b3332d4dcd6dbfa8038dfd6d31eb5343d00dba266d4273625d361ede734eaab188538492270a832c5f73bcbd4322e09bfeff1dfee086a73c9b66a5768fa9f1750e3c898bed6bea7177b736c1a414c102987839f6b39248b4a84ecb714e4433a582dd4122da5d1227d1e40e8c1f203a3652bf59349ac6bdf28dfd7abfe6a511beebd7e84e0c32702d56a4f41cbae043bfe2a3cce2a80754cde2f97acc50ad4dac16647da5595fdde14af61ba855b7d4bba59fb07b34c5d17628a3445ceb1749f68e3ca2c93454a99009a207f24325372c972dcaf440f3f84d94620d2ddd8ea8f681f90ceab8c89aa6341706558858ccfa41642c687680a58e9daa0c23030b0ae5a8032e6e8d7c3052b7ea52f3f535557b2f45fe1c5b0188d40fd71840cfaef0cb7a7b2ba4a6acac1f0a46e1300eb6d8cef98f715f64c7f6fc582b1b7bec8f0e24f0f9bebc2695fef24df94758c87474a4bf74b51ec959151fb64e6033c1aaa8e433dd78a2a4b98d9823c56c256055d4c6ae496ba97d61ec1cdf441936b6df4d132b6c42471d5d089b6a3408951aab6b21222eadef1b9fd0417aa894f67e3f0ebe5a01186872a1119a0945885954c399bd336d1b3bc37a3888b0bc277227c685dfbf893f156010074613713ccb1021befe5e51f3b4f23f3ed15b07efa9be0536f40b78b75610a8d0a90ac244861fa53958efa5b5f943c92313b5c23ad5a44af1b30ad4f5b59e40d96f74fa2479c862ab14b44df986c7fc4f4b3465ee44113fe4db416e26008513ed39bee99626c248e57c8badff5cafa4be380d27cba444429fcc8da922afee40ec30ae0cdcd0014b8a45bc7e006718f036f6d88a62a150c37927d7ecc1838b890218acb4bb911e14ee79f1ee03e6e4171beace41a4e0730a075c1a33dc93b3008e4c909c015d59977a4b13486b22cdc599a3010fab983f0c217a5dabba9b5a061048f9b069390a4042a63793f8ccfabb55b9e8d5b7d69e87691c9b7590f598d5a20a6cbe48479361fcd79e19bedadb1e0295438d30237121e0aad646a000e6636d94765024a98901c41897d85b605e6576b3a3858f95336d5250bc6d4a0e5821aa6e0ad06b8f8c79059653ba502a7a6fb70212b8560f901158395056162ddb718c59ee3c57316a496b7b080c6366f47e60829ccc1774b46b3f67769798b724494af250147d53fd103ce130b911993094ce89dbba30e0dc0b313249eaed8ee44842eee02b7e57d6a53ea96cd6091d84135e11f0c5f48b3f0fdf68f41d92a99391372531b071b3964cd900ec8b92415ba9fce778ab18eeed68bb6b45d10592b8ccb7e69d4968730cb3b0e0ef13ca84f46f25c79759e42be4b2257583af369c858753787f54fa172c724e1865061e0d5785f2824f86f5fe26e0752744e160dc37e3ba6cc94c234bcfdd4202d88335bb9fb7a5e73d0a46a3e998c01e1aaf41ce016fff7ff92bdee359cd2b86bdd8a80d8991a95b2a324392551159c52093cfb13a82b5ca734f8466314f0fb68b440b096d1a43e861dde51637a13d77f4c062740fc5286b44e053361aeec32e0c2b91dc80485d00b58ae9219deec447b6266fafda09034384ff34f842871fe5804271b48a34947753cf709096bb81801893d78f30724d1dfb87ebb6d3258c6b16f379424d51c9454cfc55b5f5351866a90e3b818147daabf4547c193a77ad77e946391d82eec29071ffeab93786da88ccb097550df688d27b52eb033fd22b166387961ab4a17222ba23346e2234cf684c4299d20de5d2831f51e34e95a02c8970af042ea1d087bc7c74e46258f058a0ae921f8fc1b0009e98a74350e32b3ef7b2137c3c8a5628e755b0027c6bc3e9c6fb4dcd41e32b9c16197279d6f352e8f7dedf6dabd03c17f957a472f58812f9e6fd2b44f26ddaaeb93885876f18fbbad5505020c1d98679cbf0d37686a46c3e809c563aeafd2bb667d02019769aa38518020650ea1f910c16fbda0fc5099bc0703c96704d25168e83b4ab01dad902378a8c7cf9cb0d91f5e9e913fb9f22128c0202aeab9e8b9843195aca5052c632174920bba86b1550d1b565243458256ba9f762d7d41e66c4dda3bbef57c15f7530475ed6cd1b696c0878976fdd2b131f3b1f34f63129acecc6a3d32bd7cabafb35bbf3de84f47b0acd4a2f373fd0b7510b725b7541bcfa59b72506e4e8f11508d047b4781613ffe77797f77dd2270208a0c2a7e8af01c4decfa73c4fc82fefbadb4fcc1a5b24c7d5aeeb9c0e709fb769792dd93fbba48f8aa9e1467aef42d2ca14d16a33e6e4a912c2ecc37e287007d81ad485911e2131d80572f7cfb7cf54cff3fb584563c37ba786e09a13b26e87f368a6abd2b78a6dd45b7f658041411519524bb447a0dd6768ffef6199c2387c167a2b4beff0099136fc39c93c49168ee541982e948b2ce6e998f8a444ebed418b79cd6f906b8275199355b59a1c77df44512a39d48b5e53fa3c31722c7fed7de0f648da3665fe8eb78904ff8226b1509f8a5213ae397f7a7532139f28e1cc00d362dfca2e5f063c56b5c19fab517a4864c9f5b89493c4abbdea2925f09d1f78f0919df74bce240a87b9f2e9e38011fa2e1f044a3e0364a2360089cb70beea64be22279266ed680a9959cd3d7f5d0640e3f2eaddde6e5d75174625562add48322a6bc36489c3a894aab15b9407cf0b9c46d0cce801cda97859bf5b23fa4b23923d95ee49258747ef18bda05213eaa6c070eb4785187d88c785ceb223d876ca530eff4f76f8390eb716213774e809da3336ecca7c6bb1c98f0a02ed0d40c3ee82cc66deee687e89579d516919bdba8691c6a37bd3c07b8a13812f8f30c4602612a0b58dc0a921b175e17ef0dc730659f0b46b82c5d401738f83a07217fb2248c4dca18d01be4cc417be8f8cdeef7ba8fe181c839a739a75570d0b1be5d40476e6f25b2ccc8db3f9898860a5187cb2fc95a837ef74c467389012ff5062c70e9331364d53fb7b67b05169d9d4b4a23b78e699791606165b6973d7e488047c5014584c554d5f1f9a68b72d3c4c093f1cf25103711f3b7a9cc28f0c41a9d8662fd1133d0878b5980391874701fcabeb2a3bdd6e8c6209a44a4e1d9d0459afc3b2a1103a9dc58641bd0d127066142d131a499468e069825ddce3207a02e5b69c5910b24e0b715c9b8de2a1957cfabcc50f17bd75c8be23522cf930de7deb7dcb2c417af96c4e4e8b4be85e6f0195107206753f64ec69d56186881a74d0df8a9fac836f6be0b672b5dd92aa8cbd6aaf6111b02d0675d0218ceb33aeafb634d0c9ddbd3378e58b1305f50f8fea62c1b6024be4bb371c950058ec06f4c5bad2d1986a2fdd8bf11226d9c2f6ef1916ffd388795f32bb88610234fae226837d78fd966f3c4b49784445661c97bf2898833456f7987921410ee2f2e34626a156623da75f95e2e2a0696b099ea74a49fe2b8c597829ff334152b6b9fca5c788d0cd6c69d68ef900961ec8f70d54e8766a41d80ccaf28502257aa3f49e32245995bc3f0a5c4c74002b45f24506718dd2d596ec85a8f656831af3722a44063c61f09ff408e8a255536411e4aa9a1b12ed7ed0fe6772edb16640f267cc14126d2c21246d863c59843eb463620f6f3e9f3cac44c89379e0b95b365c22237e6c9dac79cbaa724f947d93e464399f1543d0ff19d0f18a506e84d6f4b94c8f900990be7a938616285e8470c5dc3e210a62e872b69646d8f15be4490eb6e6274d527a8f8c2efaf5d03e3bd4488a204ff911a0b50f5b68783e6d5468cd13b7dfdc73a5ca447e5738ccdd8ad54d0e9c96ec6ccf86476fdff0a4f43e1ad1142ed2422fb94a9960f39aeca9604d873dce1e694e0fa15c856fa8e2bd2773169d352360802bccfe6fbd2921223edb5084993e5d566061a69ffb5bfdad50e61f66bf8f08967dce7badfd1b57bc335ffbd08b75bbcb4e3e5d9b8b1e43c511e2b56eb52ef9b7b916472d94b00982284f2bc73324d92682d4414f3888cfd1c264a837c03ff290b8a22162e121a42c2ec4cd92f7b006200219a63690ba8a0c09455208b7659946214eea969b1dcccb68f12542459777ee7891538a058c8b67c271da9a3ec5aa24d7b8524036f35c61c6c4ff816cc3baf7de38f93b8f0ba6fe44b1a469160b83a7c157e9e025463572e63af3e119adee6b5e078cfa80a21c8815a66a4d67899de0328959190749208180302cf7eef0c83148d0496de96cfa1f64e9af8971c8008fd18c1a591cdfe42d06a0b75b0352bb1fa8c45032c6b5c19a4380ea33777d8484f8b6c3e4465af1df8ff04f8a705e3652df7cfa0707764557ef75b2b289881b83531f0bca0561ac3cc5a7017d65c283e22d2457203a5ea38e854dc9cebcd257fd801890805a94d544d1eda99b7cc7b080628d390ee88917faaf49b83fbc3cb64282f2b99b3e795cdf606e5636b35181ab33a01fe8fe0e0b7e31a8e38d0e59a9e51b9ab6c11141e60fa677d43ca9ae044a6183fd1ad4afd315bdfc2022a5ea3058a35803a4aedf9f24922915de082c4e54a6db27db6b75b4b949daf44070a9b67f29d99b1210a800a1f8db83a96f71eb8553e8209ff2f9a504ca8fe6121f3b4343c0d4ff4363baaa36f4ac73cfd86bdaa045e1e782d25b4c3995d4b46f3ae0c660eaec43a76b93934b70918f86c964e9530a3f25a2d4eb4f2ff961057d5db28df09c79ddeda2f31fa6a576b280d0f3d62a24b0a47b72e71fd4b0dc4536a1c542aeaf2c9415495c81e269d5d2630c1a29b75f26b88cdc5742252af154692a845d2e4fdd3b362a3f454b5aab1943b578070580df8e44b9823e6ec115dd0b65ac083bc17bceb399079033cd5c7016b1e7802cb95ce9ef4ae112a8744eae957b9c3ebcec83e6de3c78db01da8a8f18d3ab0b32714a8f945e38eca969e531cc43a17270a29171c3f937401cab6e1c3ad7e8982e107d63a09e9b10c313d275c16f1a96c33ea52956934e5a6bc8ca1052d6da33217bba108e4f09b8efe799168ada5b129cf72fc10dc807cd337489b5cd1c294b246876e6c34a871ba8f1dbdff60f66451cdd63592decf56cd05f2659f46e26e4d6c1e5e6c6599c13848f54002449d083a8b73f09c15a57152675683749885ce5eb73ff5e5aca0af7c563530849e0919e216e220affe7cd37d116797cc5c861d73daa49e542ac709634c00c5da3cbd1fc5b248baa94a666bf0416c29343cee88f355f189b09123d951580972b2ce909e500454adc44841f25e4961d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9f}]}, 0x1044}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5}, @void, @val={0xc, 0x99, {0xb8dc, 0x67}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x6}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40c4) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x98, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8167}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x85}, 0x0) [ 1654.122902][T24761] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1000000, 0x0, 0x0, 0x0) 04:45:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:52 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1010000, 0x0, 0x0, 0x0) 04:45:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.234117][T24770] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2000000, 0x0, 0x0, 0x0) 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.323200][T24787] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2010000, 0x0, 0x0, 0x0) 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000100)) [ 1654.402471][T24806] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.450832][T24811] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2030000, 0x0, 0x0, 0x0) 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.513652][T24828] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3f, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.565620][T24831] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3000000, 0x0, 0x0, 0x0) [ 1654.622779][T24845] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.666731][T24851] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x4d, 0x0, @scatter={0x5, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f00000013c0)=""/57, 0x39}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f0000001580)=""/191, 0xbf}]}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f16a60e192ae2cb7afbf6e22e9fd0fe9f3f6c490df0b642685262142cd523b15e8a63a0243602599d5edb2df3f", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES64=r7, @ANYRESHEX, @ANYRES32=r6, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r5], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000004c0)={{}, r7, 0xd55923332dab4bc6, @inherit={0x60, &(0x7f0000000180)={0x1, 0x3, 0x3, 0xffff, {0x30, 0x7f, 0x7ff, 0x7fff, 0x7bb}, [0x4, 0x6, 0x6]}}, @name="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"}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3010000, 0x0, 0x0, 0x0) [ 1654.788156][T24865] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1654.820932][ C1] sd 0:0:1:0: tag#5178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1654.830778][ C1] sd 0:0:1:0: tag#5178 CDB: opcode=0x75 (reserved) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4000000, 0x0, 0x0, 0x0) [ 1654.837315][ C1] sd 0:0:1:0: tag#5178 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 1654.846362][ C1] sd 0:0:1:0: tag#5178 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 1654.855402][ C1] sd 0:0:1:0: tag#5178 CDB[20]: f1 6a 60 e1 92 ae 2c b7 af bf 6e 22 e9 fd 0f e9 [ 1654.864442][ C1] sd 0:0:1:0: tag#5178 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15 [ 1654.873498][ C1] sd 0:0:1:0: tag#5178 CDB[40]: e8 a6 3a 02 43 60 25 99 d5 ed b2 df 3f 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4010000, 0x0, 0x0, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1654.890851][T24873] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1654.954222][T24890] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.004105][T24902] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1655.012478][ C0] sd 0:0:1:0: tag#5179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1655.025257][ C0] sd 0:0:1:0: tag#5179 CDB: opcode=0x75 (reserved) [ 1655.031777][ C0] sd 0:0:1:0: tag#5179 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 1655.040830][ C0] sd 0:0:1:0: tag#5179 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5000000, 0x0, 0x0, 0x0) 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.049881][ C0] sd 0:0:1:0: tag#5179 CDB[20]: f1 6a 60 e1 92 ae 2c b7 af bf 6e 22 e9 fd 0f e9 [ 1655.058941][ C0] sd 0:0:1:0: tag#5179 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15 [ 1655.067980][ C0] sd 0:0:1:0: tag#5179 CDB[40]: 01 00 00 00 80 00 00 00 00 00 00 00 00 [ 1655.084779][T24909] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x3f, 0x1, 0x1f, 0x0, 0x896, 0x380, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4000000, 0x1}, 0x2, 0x0, 0x9, 0x4, 0x4, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x10001}, 0x0, 0xc, r0, 0x1) 04:45:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5010000, 0x0, 0x0, 0x0) 04:45:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x600, 0x0) [ 1655.142921][T24920] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6000000, 0x0, 0x0, 0x0) 04:45:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x80, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x5, 0x8e, 0x4, 0x0, 0x101, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x1102, 0x80000000, 0x3ff, 0x6, 0x3, 0x6, 0x83, 0x0, 0x63, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) 04:45:53 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6010000, 0x0, 0x0, 0x0) 04:45:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.234622][T24937] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7000000, 0x0, 0x0, 0x0) [ 1655.292142][T24944] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x6, 0x100000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x5) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7010000, 0x0, 0x0, 0x0) [ 1655.366044][T24958] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1655.400522][T24964] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8000000, 0x0, 0x0, 0x0) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x4, 0x3, 0x1) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8010000, 0x0, 0x0, 0x0) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.502540][T24980] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1655.539297][T24987] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9000000, 0x0, 0x0, 0x0) [ 1655.643315][T25001] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc0000000}) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5201}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x9262, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) set_mempolicy(0x0, &(0x7f0000000040)=0x9, 0x9) [ 1655.700588][T25010] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9010000, 0x0, 0x0, 0x0) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa000000, 0x0, 0x0, 0x0) 04:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x22) set_mempolicy(0x3, &(0x7f0000001400)=0x20, 0x3) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000002800)=0x1, 0xfffffffffffff01d) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) r5 = open_tree(r0, &(0x7f0000001340)='./file0\x00', 0x9900) r6 = accept$unix(r0, &(0x7f0000002700), &(0x7f0000002780)=0x6e) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f00000027c0)={0x8, 0x4}) io_setup(0x100, &(0x7f00000013c0)=0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) dup2(r6, 0xffffffffffffffff) r8 = io_uring_setup(0x2e5f, &(0x7f0000002980)={0x0, 0x6542, 0x20, 0x1, 0xa5, 0x0, r5}) io_submit(r7, 0x4, &(0x7f0000002940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x800, r2, &(0x7f0000000100)="17f49f33c6d2b71ee5c1c0fd5b577e85264e8c5e7486ca3af5708464d21b4940e80ca955913e708b0e131e74a5f992b7844fb7bdf1479b7200"/67, 0x43, 0x100000001, 0x0, 0x1, r0}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x2, 0xfffb, r3, &(0x7f0000000200)="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", 0x1000, 0x4, 0x0, 0x1, r4}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x3, 0x8000, r8, &(0x7f0000001240)="357e425d76cd77436f5bf758f002052f3dd066c6389e8af56722effdfc90737d8d2b9ac89646de57870a852fdbe6415968a96073a45d3be568a0403475cbd256fa9f6ca1225107f03832a74d89d5658b5362c03b07159dc7320d85dde0f38a8f601134a59b8b9d251086c648ea44532fde1e208e98a1bc577d51665bc1f679b27444cb53e197a5ff2e459b7933d7aedc3ae5544bc817827596a5cfed3b3008f10964083caac9e21b275969b5aa2fa9f4ea4a1a746327b8656b57b52a3ed4b6fb1bda", 0xc2, 0x47, 0x0, 0x2, r0}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f0000002a00)="1cf8fdda7ac2967494acadab627567f551778016fe8b6eee32a0d8b4d237b5b2060e33fa6d89e6cc54aa76ed33a3891bba9bb862a045d045ac163924239fdbea1118b5864f6e5cc73af1ccaf53487b6e2935cc52dd42d889075ee6dc113d51d2ea4daa3f0238dcfc99632383f0a9e423397ce75de6ba7e3e744b11f79bdb39485d86bb0a717aa360a5bd1e00000000000000000000000000000000876adbd3cb19308c3cd172fb2e3e3bbbd445dda98f7dcb41950c4f881c0dc705adade1ceb22036411bec6189a1e6ed7c2138b65dbd71c2e4f3", 0xd4, 0x8, 0x0, 0x0, r2}]) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000002680)='\xfa%&[\x00') readv(r5, &(0x7f0000002640)=[{&(0x7f0000001440)=""/70, 0x46}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/125, 0x7d}, {&(0x7f0000002540)=""/206, 0xce}], 0x4) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x2}, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa010000, 0x0, 0x0, 0x0) [ 1655.839305][T25038] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x6) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.888694][T25048] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb000000, 0x0, 0x0, 0x0) 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x9, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1655.960883][T25061] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1655.997801][T25072] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xb010000, 0x0, 0x0, 0x0) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x302}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x100000000, 0x200) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x141) write(0xffffffffffffffff, &(0x7f0000000040)="ad7e476dfdf694effb3404ac92", 0xd) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.093082][T25088] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc000000, 0x0, 0x0, 0x0) 04:45:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1f9) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x7f, 0x0, 0xfffffffe, 0x9}, 0x14) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x4000810, r0, 0xe99a000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010100}, 0x10) 04:45:54 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xc010000, 0x0, 0x0, 0x0) [ 1656.153272][T25101] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.212843][T25113] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) 04:45:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x303}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.262869][T25122] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd000000, 0x0, 0x0, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x304}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.341382][T25132] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1656.360267][T25144] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xd010000, 0x0, 0x0, 0x0) 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x4, 0x7) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x305}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfd14) ftruncate(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r0, 0x1, 0x1008, 0x28120001) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = epoll_create(0x2) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)={0x0, ""/256, 0x0, 0x0}) epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {0x0, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r6, r8}, {}, {r6}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {}, {r7}, {}, {0x0, r8}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r6}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {}, {}, {r6, r8}, {r6}, {r7, r8}, {}, {r6}, {r6, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7}, {r7}, {}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {}, {0x0, r9}, {r7}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r7}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7}, {r6, r8}, {r7}, {r7, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {r6}, {r7}, {r6}, {r7, r8}, {}, {r6, r8}, {}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7}, {r6}, {0x0, r8}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {0x0, r8}, {r6, r8}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000280)={r8, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe000000, 0x0, 0x0, 0x0) [ 1656.440784][T25149] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1656.475463][T25160] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xe010000, 0x0, 0x0, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x306}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.538194][T25170] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1656.573201][T25176] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf000000, 0x0, 0x0, 0x0) [ 1656.623500][ C1] sd 0:0:1:0: tag#5120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1656.633411][ C1] sd 0:0:1:0: tag#5120 CDB: opcode=0xe5 (vendor) [ 1656.639761][ C1] sd 0:0:1:0: tag#5120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1656.648793][ C1] sd 0:0:1:0: tag#5120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1656.657813][ C1] sd 0:0:1:0: tag#5120 CDB[20]: ba 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x1, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x100000b, 0x1010, r4, 0xf6ae9000) setresuid(0x0, r3, 0xee00) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000440)='./file0\x00', r3, r5, 0x1800) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0xc005c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4de, 0x5b5a}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0xb8, 0x64, @buffer={0x0, 0xb4, &(0x7f0000000100)=""/180}, &(0x7f00000001c0)="c627dda7e20a432e92fb5e6adb07d45d3ece4bc3a0c60c42b3a13199e349d004003ba8b0e3c7390367b0d5b8f39eba172f93bb53f558301b224abf524737857168e84265187933e498e6015645ad35412bb2f559018a5fcf7910515713a6f64d3b71bd55bb81ca05a703ce1311befd577250a3ee197fbd94a66999104323b2921251e0b9ea37f6af2ba15347af7157bcb25d5f6e2ffdcf4b1d3e3fc88e3d0a7ceb87c17accfab62336e0c9b69b36a11491ad52ec1d38a59b", &(0x7f0000000280)=""/222, 0x4, 0x1, 0x0, &(0x7f0000000380)}) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x307}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x4010, r0, 0x36be5000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x1e8}) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x12, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x2, 0x7, @fd_index=0x9, 0x3, &(0x7f0000000100)="8824a4371cbe64c193ed7f792a586d58fec18ae04e8ad78734ae7204dbcec6e1903026393829bd692f13666e3d9984a2105cd9ed6aa6c4f3ddd51cec152ee8c0d09b4994c323679ecb16b2d73cbee66c4f524c0b7d6011bb5fce6912f6ab02504186af98f3c28db68a3562471ec24624c028cba2a5565ecfe7bcfbeb22c382f2aab7dcb9421bb5d021b9ef472d30f2308573693ddfb8e2b2de6d56321735ed8e048bfd", 0xa3, 0x10, 0x1}, 0x6ee) [ 1656.706621][T25191] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xf010000, 0x0, 0x0, 0x0) 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0xffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x22) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x0, 0x4, 0x0, 0x5, 0x22020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000100), 0x5}, 0x12109, 0x7fff, 0x2, 0x4, 0x7fff, 0x6, 0x101, 0x0, 0x9, 0x0, 0x80000001}, 0x0, 0x2, r1, 0x0) [ 1656.773621][T25198] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x10000000, 0x0, 0x0, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.840348][T25221] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.885546][T25223] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x10010000, 0x0, 0x0, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x309}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000340), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000136000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x5}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0}, 0x0) r4 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000002c0)=@nl=@proc, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x7fff, 0x7, 0x1, {0x0, r8, r1}}, 0x4) 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1656.995068][T25245] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x110) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x7280, @empty, 0x3}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d600"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x8, 0x4) sendfile(r0, r1, 0x0, 0xbf) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x11000000, 0x0, 0x0, 0x0) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.039173][T25251] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xa5) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x3f) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x30a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x11010000, 0x0, 0x0, 0x0) 04:45:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfb4ac7d7a83e64f, @perf_config_ext={0x8400, 0xfffffffffffffff8}, 0x1002, 0x8001, 0x20, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) write$binfmt_aout(r0, &(0x7f0000000100)={{0x10b, 0x1, 0x4, 0x235, 0x3d5, 0xacbc, 0x349, 0x1000}, "a1fa9203548904bf117c8a8cb2a593d6d7de9d4bb932b05cdc6e7fdc11b4f201ec635669134ff1a5a731e6cc4efb21a917d1650b82e41a84bb15d4965c5f21a899cbeeff0d0abaaab6d71061028bdcc67f101465220478d2703a849bb722fd7703ba1443d0191ee4dd30b8a6af3bdc03d5c6a9f1bebbc5a3bc8af54311a887d8257826c3f57f0136eac7600bc5ce78883e901c02e33676f761c8e511138e2998c4042da5153e3b965b6e66a4f1fc26dda10051b517d4d9319434f03b3fb2585d4b7e35d66e2941973b314165c5b7a8dd05229f56447b2d7aa1f45f6b0ad7", ['\x00', '\x00']}, 0x2fe) 04:45:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.144921][T25271] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1657.172433][T25280] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:55 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x18e) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=""/176, 0xb0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 04:45:55 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x12000000, 0x0, 0x0, 0x0) 04:45:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x30b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.224391][T25291] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1657.261311][T25294] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) clone(0x2000000, &(0x7f0000000100)="076a5458e327d56f9ea65a63f6f31d760eca09750fe5569a01cdf02a005b4caa80c748139eaa279aa2e4b5f1adcac7a86aa952fff8ffe9a30de824760a0388c8f6a340505e4b9f48df9883d25a9a3e06bf9d0c0b428b354cb70d7d53a9c633e98c001ef58600e27d3343673eca4876d39bd3fd6e27eb45aac6f61e2a11bf4f20c0a4570ce09ee7334e94a7bff2b68fb0773ba67c8daef3e385b339332daa2cb6d555ed6772266bbd5de1c53c808421f1503291f23ac35b6c2544da6261d7854130b1520f7a5eba35d6fbba2d28a74868b16c9b4c0f41", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="1c09adb8c5ad545832cd45af23892df15d4f3d2e7d0635149845689d059a05b169b2100e60ee17dcc3cc27af08a8703c8db2b4498ad19a6ea8e1e8e7e6eb28330c0889caf454ab15c2a7bf42330881aa02dff35c380dd6305b6290") openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x12010000, 0x0, 0x0, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x30c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101280, 0x10) openat(r0, &(0x7f0000000040)='./file0\x00', 0xc0, 0x81) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.367005][T25314] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x2f, 0x0, 0x20, 0x9, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x80, 0x1000}}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=r2, @ANYBLOB="040002000000dd000000c500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800020020", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x1) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x13000000, 0x0, 0x0, 0x0) [ 1657.411752][T25326] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x30d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.478346][T25339] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x800, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x1, 0xbb, 0x7, 0x0, 0x97bb, 0x44087, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x2, 0xc6c1}, 0x4208, 0xffffffffffffffff, 0x61, 0x4, 0x4, 0x2, 0x5, 0x0, 0xef5b, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x1) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x13010000, 0x0, 0x0, 0x0) 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.527365][T25343] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x800, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x14000000, 0x0, 0x0, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x30e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x14010000, 0x0, 0x0, 0x0) [ 1657.635360][T25364] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1657.671101][T25376] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x1000, ""/4096}) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x15000000, 0x0, 0x0, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.735299][T25384] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x15010000, 0x0, 0x0, 0x0) 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x833}, r1, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.802983][T25397] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x16000000, 0x0, 0x0, 0x0) 04:45:56 executing program 0: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040), &(0x7f0000000100)=0x4) set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x311}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x16010000, 0x0, 0x0, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1657.891048][T25410] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1657.927913][T25420] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x312}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x17000000, 0x0, 0x0, 0x0) 04:45:56 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040), 0x3ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1f, 0x0, "bda948fb44ab5cf164b5197f6ca5cf3a4ed6e56144b568d994262dec5362c7de3767fa41396ca65644a40451fe62b13973415ff071947a51ea9d1638c6dedbd4b548d732c1d07d5fdae39f76bd8a00d6"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) set_mempolicy(0x4000, &(0x7f0000000100)=0x101, 0x2) [ 1658.037660][T25438] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x325}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.087350][T25447] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x17010000, 0x0, 0x0, 0x0) 04:45:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x18000000, 0x0, 0x0, 0x0) 04:45:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.186724][T25461] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:56 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x18010000, 0x0, 0x0, 0x0) 04:45:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.241149][T25475] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x327}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x19000000, 0x0, 0x0, 0x0) 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x348}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x19010000, 0x0, 0x0, 0x0) [ 1658.358531][T25495] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.422019][T25504] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x34c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1a000000, 0x0, 0x0, 0x0) 04:45:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.516486][T25522] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1658.553448][T25527] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1a010000, 0x0, 0x0, 0x0) 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x360}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1b000000, 0x0, 0x0, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.637239][T25545] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1658.668571][T25552] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1b010000, 0x0, 0x0, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x368}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.768355][T25566] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1c000000, 0x0, 0x0, 0x0) [ 1658.814975][T25577] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x36c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1c010000, 0x0, 0x0, 0x0) [ 1658.903446][T25596] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1658.946214][T25601] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x374}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1d000000, 0x0, 0x0, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.028036][T25616] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.042782][T25621] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x37a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1d010000, 0x0, 0x0, 0x0) 04:45:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x2700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.124352][T25632] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.148422][T25637] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b3ae8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x308}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1e000000, 0x0, 0x0, 0x0) [ 1659.246251][T25654] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.270903][T25660] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1e010000, 0x0, 0x0, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.365644][T25675] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.383163][T25679] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1f000000, 0x0, 0x0, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x1f010000, 0x0, 0x0, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.490145][T25690] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.510819][T25698] ref_ctr_offset mismatch. inode: 0x361d offset: 0x700 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 [ 1659.524137][T25703] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x20000000, 0x0, 0x0, 0x0) 04:45:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.554496][T25705] ref_ctr_offset mismatch. inode: 0x361d offset: 0x700 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 [ 1659.591409][T25711] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x20010000, 0x0, 0x0, 0x0) [ 1659.625001][T25717] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockname$unix(r0, 0xffffffffffffffff, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.682525][T25729] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.714699][T25732] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x21000000, 0x0, 0x0, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockname$unix(r0, 0xffffffffffffffff, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x21010000, 0x0, 0x0, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x22000000, 0x0, 0x0, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff07, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1659.814228][T25742] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.848126][T25753] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockname$unix(r0, 0xffffffffffffffff, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x22010000, 0x0, 0x0, 0x0) [ 1659.918801][T25765] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1659.956822][T25772] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x23000000, 0x0, 0x0, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) set_mempolicy(0x8003, &(0x7f0000000240)=0x6, 0x9) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x23010000, 0x0, 0x0, 0x0) [ 1660.116430][T25797] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1660.155167][T25805] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:58 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x24000000, 0x0, 0x0, 0x0) [ 1660.233248][T25819] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x8051010000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x24010000, 0x0, 0x0, 0x0) [ 1660.300167][T25828] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x25000000, 0x0, 0x0, 0x0) [ 1660.377446][T25838] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1660.422936][T25846] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x25010000, 0x0, 0x0, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1660.510074][T25861] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1660.532755][T25867] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x26000000, 0x0, 0x0, 0x0) [ 1660.640625][T25878] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x26010000, 0x0, 0x0, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xf000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1660.689849][T25884] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x27000000, 0x0, 0x0, 0x0) 04:45:59 executing program 0: set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x27010000, 0x0, 0x0, 0x0) [ 1660.813833][T25904] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1660.848784][T25916] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b3ae8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x28000000, 0x0, 0x0, 0x0) 04:45:59 executing program 0: set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1660.941121][T25930] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1660.976493][T25936] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x28010000, 0x0, 0x0, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1661.083615][T25953] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1661.113002][T25960] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:45:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 0: set_mempolicy(0x1, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x29000000, 0x0, 0x0, 0x0) 04:45:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:45:59 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x29010000, 0x0, 0x0, 0x0) [ 1661.193889][T25969] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1661.229330][T25978] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 0: set_mempolicy(0x1, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2a000000, 0x0, 0x0, 0x0) 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1661.316523][T25990] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040), 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1661.378621][T25999] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040), 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2a010000, 0x0, 0x0, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040), 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2b000000, 0x0, 0x0, 0x0) [ 1661.508512][T26019] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1661.569501][T26031] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2b010000, 0x0, 0x0, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2c000000, 0x0, 0x0, 0x0) [ 1661.670492][T26048] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1661.717163][T26056] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2c010000, 0x0, 0x0, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2d000000, 0x0, 0x0, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1661.841505][T26080] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2d010000, 0x0, 0x0, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1661.884351][T26087] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2e000000, 0x0, 0x0, 0x0) [ 1661.945113][T26099] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1662.017618][T26108] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2e010000, 0x0, 0x0, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.130145][T26130] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1662.161660][T26137] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2f000000, 0x0, 0x0, 0x0) 04:46:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:00 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x500}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2f010000, 0x0, 0x0, 0x0) 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1662.288270][T26156] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x30000000, 0x0, 0x0, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 1662.360287][T26168] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x30010000, 0x0, 0x0, 0x0) [ 1662.439369][T26183] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.483542][T26191] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x31000000, 0x0, 0x0, 0x0) 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x2b000000, 0x0, 0x0, 0x0) 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x31010000, 0x0, 0x0, 0x0) 04:46:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.587438][T26207] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4701, 0x0, 0x0, 0x0) [ 1662.662236][T26217] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x32000000, 0x0, 0x0, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x700, 0x0, 0x0, 0x0) [ 1662.734749][T26232] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x32010000, 0x0, 0x0, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.801830][T26241] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x33000000, 0x0, 0x0, 0x0) [ 1662.871826][T26255] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.913177][T26264] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9f, 0x0, 0x0, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x33010000, 0x0, 0x0, 0x0) 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x33000000, 0x0, 0x0, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.006971][T26277] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x34000000, 0x0, 0x0, 0x0) 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.082788][T26287] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9d, 0x0, 0x0, 0x0) 04:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x34010000, 0x0, 0x0, 0x0) 04:46:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x25}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:01 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x35000000, 0x0, 0x0, 0x0) 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x35010000, 0x0, 0x0, 0x0) 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.254452][T26314] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1663.282570][T26327] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.338644][T26335] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1663.360714][T26341] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x36000000, 0x0, 0x0, 0x0) [ 1663.406369][T26345] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1663.418654][T26347] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x36010000, 0x0, 0x0, 0x0) [ 1663.449123][T26354] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x12 ref_ctr_offset(new): 0x4 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x37000000, 0x0, 0x0, 0x0) [ 1663.505369][T26363] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x12 ref_ctr_offset(new): 0x4 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x37010000, 0x0, 0x0, 0x0) 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.548987][T26368] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe83a1b00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.592422][T26376] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x38000000, 0x0, 0x0, 0x0) 04:46:02 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x14c, 0x0, 0x0, 0x0, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x38010000, 0x0, 0x0, 0x0) 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.708409][T26394] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1663.746629][T26405] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0xab, 0x0, 0x0, 0x0, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x39000000, 0x0, 0x0, 0x0) 04:46:02 executing program 0 (fault-call:2 fault-nth:0): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x39010000, 0x0, 0x0, 0x0) [ 1663.852686][T26423] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1663.888623][T26431] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff070000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.923504][T26438] FAULT_INJECTION: forcing a failure. [ 1663.923504][T26438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.936651][T26438] CPU: 1 PID: 26438 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1663.945068][T26438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.955196][T26438] Call Trace: [ 1663.958472][T26438] dump_stack_lvl+0xd6/0x122 [ 1663.963069][T26438] dump_stack+0x11/0x1b [ 1663.967220][T26438] should_fail+0x23c/0x250 04:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1663.971638][T26438] should_fail_usercopy+0x16/0x20 [ 1663.976659][T26438] _copy_from_user+0x1c/0xd0 [ 1663.981244][T26438] perf_copy_attr+0x156/0x650 [ 1663.985972][T26438] __se_sys_perf_event_open+0xca/0x2810 [ 1663.991543][T26438] ? proc_fail_nth_write+0x127/0x150 [ 1663.996850][T26438] ? proc_fail_nth_read+0x150/0x150 [ 1664.002158][T26438] ? vfs_write+0x60b/0x8d0 [ 1664.006680][T26438] __x64_sys_perf_event_open+0x63/0x70 [ 1664.012141][T26438] do_syscall_64+0x44/0xa0 [ 1664.016591][T26438] entry_SYSCALL_64_after_hwframe+0x44/0xae 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3a000000, 0x0, 0x0, 0x0) [ 1664.022632][T26438] RIP: 0033:0x4665f9 [ 1664.026542][T26438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.046182][T26438] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1664.054589][T26438] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1664.062565][T26438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3a010000, 0x0, 0x0, 0x0) 04:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 0 (fault-call:2 fault-nth:1): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1664.070557][T26438] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.078518][T26438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1664.086483][T26438] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1664.094552][T26444] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3b000000, 0x0, 0x0, 0x0) 04:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1664.152139][T26459] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1664.174130][T26467] FAULT_INJECTION: forcing a failure. [ 1664.174130][T26467] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.186836][T26467] CPU: 0 PID: 26467 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 04:46:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3b010000, 0x0, 0x0, 0x0) [ 1664.195279][T26467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.205330][T26467] Call Trace: [ 1664.208607][T26467] dump_stack_lvl+0xd6/0x122 [ 1664.213200][T26467] dump_stack+0x11/0x1b [ 1664.217354][T26467] should_fail+0x23c/0x250 [ 1664.221846][T26467] __should_failslab+0x81/0x90 [ 1664.226616][T26467] should_failslab+0x5/0x20 [ 1664.231147][T26467] kmem_cache_alloc_node+0x61/0x2c0 [ 1664.236344][T26467] ? perf_event_alloc+0x160/0x1790 [ 1664.241481][T26467] perf_event_alloc+0x160/0x1790 [ 1664.246420][T26467] __se_sys_perf_event_open+0x5db/0x2810 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3c000000, 0x0, 0x0, 0x0) [ 1664.252056][T26467] ? proc_fail_nth_read+0x150/0x150 [ 1664.257260][T26467] __x64_sys_perf_event_open+0x63/0x70 [ 1664.262797][T26467] do_syscall_64+0x44/0xa0 [ 1664.267219][T26467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1664.273120][T26467] RIP: 0033:0x4665f9 [ 1664.277006][T26467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.296654][T26467] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1664.305063][T26467] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1664.313084][T26467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1664.321055][T26467] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.329026][T26467] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1664.337003][T26467] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff470000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 0 (fault-call:2 fault-nth:2): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3c010000, 0x0, 0x0, 0x0) [ 1664.357763][T26475] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1664.379467][T26487] FAULT_INJECTION: forcing a failure. [ 1664.379467][T26487] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.392186][T26487] CPU: 0 PID: 26487 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3d000000, 0x0, 0x0, 0x0) [ 1664.400593][T26487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.410724][T26487] Call Trace: [ 1664.413998][T26487] dump_stack_lvl+0xd6/0x122 [ 1664.418607][T26487] dump_stack+0x11/0x1b [ 1664.422895][T26487] should_fail+0x23c/0x250 [ 1664.427375][T26487] ? perf_uprobe_init+0x45/0x140 [ 1664.432316][T26487] __should_failslab+0x81/0x90 [ 1664.437069][T26487] should_failslab+0x5/0x20 [ 1664.441633][T26487] __kmalloc_track_caller+0x6d/0x350 [ 1664.446921][T26487] ? strnlen_user+0x137/0x1c0 [ 1664.451600][T26487] strndup_user+0x73/0x120 [ 1664.456059][T26487] perf_uprobe_init+0x45/0x140 [ 1664.460827][T26487] perf_uprobe_event_init+0xde/0x140 [ 1664.466565][T26487] perf_try_init_event+0x21a/0x400 [ 1664.471787][T26487] perf_event_alloc+0xa60/0x1790 [ 1664.476747][T26487] __se_sys_perf_event_open+0x5db/0x2810 [ 1664.482369][T26487] ? proc_fail_nth_read+0x150/0x150 [ 1664.487572][T26487] __x64_sys_perf_event_open+0x63/0x70 [ 1664.493015][T26487] do_syscall_64+0x44/0xa0 [ 1664.497445][T26487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1664.503411][T26487] RIP: 0033:0x4665f9 [ 1664.507341][T26487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.526988][T26487] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1664.535484][T26487] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1664.543466][T26487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3d010000, 0x0, 0x0, 0x0) 04:46:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 0 (fault-call:2 fault-nth:3): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1664.551499][T26487] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.559453][T26487] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1664.567485][T26487] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1664.585333][T26485] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1664.637120][T26508] FAULT_INJECTION: forcing a failure. [ 1664.637120][T26508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.650207][T26508] CPU: 1 PID: 26508 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1664.658707][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.668804][T26508] Call Trace: [ 1664.672068][T26508] dump_stack_lvl+0xd6/0x122 [ 1664.676662][T26508] dump_stack+0x11/0x1b [ 1664.680941][T26508] should_fail+0x23c/0x250 [ 1664.685344][T26508] should_fail_usercopy+0x16/0x20 [ 1664.690428][T26508] _copy_from_user+0x1c/0xd0 [ 1664.695000][T26508] strndup_user+0xb0/0x120 [ 1664.699414][T26508] perf_uprobe_init+0x45/0x140 [ 1664.704179][T26508] perf_uprobe_event_init+0xde/0x140 [ 1664.709475][T26508] perf_try_init_event+0x21a/0x400 [ 1664.714570][T26508] perf_event_alloc+0xa60/0x1790 [ 1664.719567][T26508] __se_sys_perf_event_open+0x5db/0x2810 [ 1664.725184][T26508] ? proc_fail_nth_read+0x150/0x150 [ 1664.730399][T26508] __x64_sys_perf_event_open+0x63/0x70 [ 1664.735851][T26508] do_syscall_64+0x44/0xa0 [ 1664.740256][T26508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1664.746132][T26508] RIP: 0033:0x4665f9 [ 1664.750008][T26508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.769607][T26508] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1664.778066][T26508] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 04:46:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3e000000, 0x0, 0x0, 0x0) 04:46:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 0 (fault-call:2 fault-nth:4): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1664.786012][T26508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1664.793960][T26508] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.801944][T26508] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1664.809930][T26508] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1664.863596][T26514] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1664.886299][T26520] FAULT_INJECTION: forcing a failure. [ 1664.886299][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.898916][T26520] CPU: 1 PID: 26520 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3e010000, 0x0, 0x0, 0x0) [ 1664.907347][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.917389][T26520] Call Trace: [ 1664.920663][T26520] dump_stack_lvl+0xd6/0x122 [ 1664.925315][T26520] dump_stack+0x11/0x1b [ 1664.929464][T26520] should_fail+0x23c/0x250 [ 1664.933879][T26520] ? getname_kernel+0x37/0x1d0 [ 1664.938695][T26520] __should_failslab+0x81/0x90 [ 1664.943477][T26520] should_failslab+0x5/0x20 [ 1664.948017][T26520] kmem_cache_alloc+0x4f/0x300 [ 1664.952780][T26520] getname_kernel+0x37/0x1d0 [ 1664.957366][T26520] kern_path+0x1d/0x110 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3f000000, 0x0, 0x0, 0x0) [ 1664.961526][T26520] create_local_trace_uprobe+0x51/0x3d0 [ 1664.967071][T26520] perf_uprobe_init+0xbe/0x140 [ 1664.971830][T26520] perf_uprobe_event_init+0xde/0x140 [ 1664.977117][T26520] perf_try_init_event+0x21a/0x400 [ 1664.982228][T26520] perf_event_alloc+0xa60/0x1790 [ 1664.987144][T26520] __se_sys_perf_event_open+0x5db/0x2810 [ 1664.992779][T26520] ? proc_fail_nth_read+0x150/0x150 [ 1664.998004][T26520] __x64_sys_perf_event_open+0x63/0x70 [ 1665.003463][T26520] do_syscall_64+0x44/0xa0 [ 1665.007862][T26520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1665.013737][T26520] RIP: 0033:0x4665f9 [ 1665.017608][T26520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.037295][T26520] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1665.045687][T26520] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1665.053687][T26520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:03 executing program 0 (fault-call:2 fault-nth:5): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x3f010000, 0x0, 0x0, 0x0) 04:46:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1665.061639][T26520] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.069605][T26520] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1665.077560][T26520] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1665.089049][T26529] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x40000000, 0x0, 0x0, 0x0) [ 1665.167519][T26540] FAULT_INJECTION: forcing a failure. [ 1665.167519][T26540] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.180173][T26540] CPU: 1 PID: 26540 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1665.188589][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.198730][T26540] Call Trace: [ 1665.202009][T26540] dump_stack_lvl+0xd6/0x122 [ 1665.206683][T26540] dump_stack+0x11/0x1b [ 1665.211016][T26540] should_fail+0x23c/0x250 04:46:03 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x40010000, 0x0, 0x0, 0x0) 04:46:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1665.215430][T26540] __should_failslab+0x81/0x90 [ 1665.220192][T26540] ? proc_self_get_link+0x90/0x100 [ 1665.225302][T26540] should_failslab+0x5/0x20 [ 1665.229802][T26540] kmem_cache_alloc_trace+0x52/0x320 [ 1665.235118][T26540] proc_self_get_link+0x90/0x100 [ 1665.240058][T26540] ? proc_setup_self+0x1d0/0x1d0 [ 1665.245134][T26540] step_into+0x9dc/0xee0 [ 1665.249456][T26540] walk_component+0x1a1/0x360 [ 1665.254126][T26540] link_path_walk+0x4ae/0x770 [ 1665.258798][T26540] path_lookupat+0x8b/0x3d0 [ 1665.263301][T26540] __filename_lookup+0x130/0x310 [ 1665.268242][T26540] kern_path+0x35/0x110 [ 1665.272409][T26540] create_local_trace_uprobe+0x51/0x3d0 [ 1665.277951][T26540] perf_uprobe_init+0xbe/0x140 [ 1665.282732][T26540] perf_uprobe_event_init+0xde/0x140 [ 1665.288056][T26540] perf_try_init_event+0x21a/0x400 [ 1665.293148][T26540] perf_event_alloc+0xa60/0x1790 [ 1665.298125][T26540] __se_sys_perf_event_open+0x5db/0x2810 [ 1665.303762][T26540] ? proc_fail_nth_read+0x150/0x150 [ 1665.308940][T26540] __x64_sys_perf_event_open+0x63/0x70 [ 1665.314395][T26540] do_syscall_64+0x44/0xa0 [ 1665.318836][T26540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1665.324726][T26540] RIP: 0033:0x4665f9 [ 1665.328598][T26540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.348188][T26540] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1665.356603][T26540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x41000000, 0x0, 0x0, 0x0) [ 1665.364568][T26540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1665.372532][T26540] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.380493][T26540] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1665.388486][T26540] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1665.403191][T26559] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x41010000, 0x0, 0x0, 0x0) 04:46:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1665.431051][T26551] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:04 executing program 0 (fault-call:2 fault-nth:6): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x42000000, 0x0, 0x0, 0x0) [ 1665.521692][T26579] FAULT_INJECTION: forcing a failure. [ 1665.521692][T26579] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.534412][T26579] CPU: 1 PID: 26579 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1665.542871][T26579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.552915][T26579] Call Trace: [ 1665.556190][T26579] dump_stack_lvl+0xd6/0x122 [ 1665.560777][T26579] dump_stack+0x11/0x1b [ 1665.565005][T26579] should_fail+0x23c/0x250 [ 1665.569430][T26579] __should_failslab+0x81/0x90 [ 1665.574188][T26579] ? create_local_trace_uprobe+0xbb/0x3d0 [ 1665.579920][T26579] should_failslab+0x5/0x20 [ 1665.584452][T26579] kmem_cache_alloc_trace+0x52/0x320 [ 1665.589809][T26579] create_local_trace_uprobe+0xbb/0x3d0 [ 1665.595338][T26579] perf_uprobe_init+0xbe/0x140 [ 1665.600165][T26579] perf_uprobe_event_init+0xde/0x140 [ 1665.605446][T26579] perf_try_init_event+0x21a/0x400 [ 1665.610534][T26579] perf_event_alloc+0xa60/0x1790 [ 1665.615452][T26579] __se_sys_perf_event_open+0x5db/0x2810 [ 1665.621076][T26579] ? proc_fail_nth_read+0x150/0x150 [ 1665.626273][T26579] __x64_sys_perf_event_open+0x63/0x70 [ 1665.631711][T26579] do_syscall_64+0x44/0xa0 [ 1665.636117][T26579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1665.642012][T26579] RIP: 0033:0x4665f9 [ 1665.645898][T26579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.665501][T26579] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1665.673903][T26579] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1665.681857][T26579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1665.689834][T26579] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.697784][T26579] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1665.705749][T26579] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1665.713768][T26579] trace_uprobe: Failed to allocate trace_uprobe.(-12) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x42010000, 0x0, 0x0, 0x0) 04:46:04 executing program 0 (fault-call:2 fault-nth:7): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1665.721509][T26585] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1665.751827][T26591] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x43000000, 0x0, 0x0, 0x0) [ 1665.776668][T26597] FAULT_INJECTION: forcing a failure. [ 1665.776668][T26597] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.789321][T26597] CPU: 0 PID: 26597 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1665.797738][T26597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.807788][T26597] Call Trace: [ 1665.811059][T26597] dump_stack_lvl+0xd6/0x122 [ 1665.815650][T26597] dump_stack+0x11/0x1b [ 1665.819847][T26597] should_fail+0x23c/0x250 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x43010000, 0x0, 0x0, 0x0) [ 1665.824261][T26597] ? kzalloc+0x16/0x20 [ 1665.828328][T26597] __should_failslab+0x81/0x90 [ 1665.833096][T26597] should_failslab+0x5/0x20 [ 1665.837598][T26597] __kmalloc+0x6f/0x350 [ 1665.841747][T26597] ? should_fail+0xd6/0x250 [ 1665.846240][T26597] kzalloc+0x16/0x20 [ 1665.850123][T26597] trace_probe_init+0x41/0x250 [ 1665.854882][T26597] create_local_trace_uprobe+0xe3/0x3d0 [ 1665.860422][T26597] perf_uprobe_init+0xbe/0x140 [ 1665.865288][T26597] perf_uprobe_event_init+0xde/0x140 [ 1665.870570][T26597] perf_try_init_event+0x21a/0x400 [ 1665.875677][T26597] perf_event_alloc+0xa60/0x1790 [ 1665.880614][T26597] __se_sys_perf_event_open+0x5db/0x2810 [ 1665.886249][T26597] ? proc_fail_nth_read+0x150/0x150 [ 1665.891472][T26597] __x64_sys_perf_event_open+0x63/0x70 [ 1665.896932][T26597] do_syscall_64+0x44/0xa0 [ 1665.901353][T26597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1665.907313][T26597] RIP: 0033:0x4665f9 [ 1665.911203][T26597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.930832][T26597] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1665.939223][T26597] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1665.947173][T26597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1665.955122][T26597] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.963089][T26597] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 04:46:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x44000000, 0x0, 0x0, 0x0) 04:46:04 executing program 0 (fault-call:2 fault-nth:8): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1665.971052][T26597] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1665.979049][T26597] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1666.014211][T26602] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1666.023863][T26617] FAULT_INJECTION: forcing a failure. [ 1666.023863][T26617] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.038192][T26617] CPU: 0 PID: 26617 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1666.046632][T26617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.056737][T26617] Call Trace: [ 1666.060002][T26617] dump_stack_lvl+0xd6/0x122 [ 1666.064603][T26617] dump_stack+0x11/0x1b [ 1666.068764][T26617] should_fail+0x23c/0x250 [ 1666.073183][T26617] ? trace_probe_init+0x1bd/0x250 [ 1666.078256][T26617] __should_failslab+0x81/0x90 [ 1666.083017][T26617] should_failslab+0x5/0x20 [ 1666.087501][T26617] __kmalloc_track_caller+0x6d/0x350 [ 1666.092764][T26617] ? __kmalloc+0x249/0x350 [ 1666.097239][T26617] ? kzalloc+0x16/0x20 [ 1666.101289][T26617] kstrdup+0x31/0x70 [ 1666.105166][T26617] trace_probe_init+0x1bd/0x250 [ 1666.109993][T26617] create_local_trace_uprobe+0xe3/0x3d0 [ 1666.115559][T26617] perf_uprobe_init+0xbe/0x140 [ 1666.120386][T26617] perf_uprobe_event_init+0xde/0x140 [ 1666.125668][T26617] perf_try_init_event+0x21a/0x400 [ 1666.130760][T26617] perf_event_alloc+0xa60/0x1790 [ 1666.135689][T26617] __se_sys_perf_event_open+0x5db/0x2810 [ 1666.141299][T26617] ? proc_fail_nth_read+0x150/0x150 [ 1666.146555][T26617] __x64_sys_perf_event_open+0x63/0x70 [ 1666.152014][T26617] do_syscall_64+0x44/0xa0 [ 1666.156438][T26617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1666.162383][T26617] RIP: 0033:0x4665f9 [ 1666.166325][T26617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.186019][T26617] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1666.194416][T26617] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1666.202371][T26617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1666.210339][T26617] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.218394][T26617] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 04:46:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x44010000, 0x0, 0x0, 0x0) 04:46:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:04 executing program 0 (fault-call:2 fault-nth:9): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1666.226346][T26617] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1666.234350][T26617] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1666.246543][T26621] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x45000000, 0x0, 0x0, 0x0) [ 1666.299532][T26632] FAULT_INJECTION: forcing a failure. [ 1666.299532][T26632] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.312263][T26632] CPU: 0 PID: 26632 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1666.320677][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.330728][T26632] Call Trace: [ 1666.334003][T26632] dump_stack_lvl+0xd6/0x122 [ 1666.338593][T26632] dump_stack+0x11/0x1b [ 1666.342754][T26632] should_fail+0x23c/0x250 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x45010000, 0x0, 0x0, 0x0) [ 1666.347224][T26632] ? trace_probe_init+0x1e1/0x250 [ 1666.352246][T26632] __should_failslab+0x81/0x90 [ 1666.357012][T26632] should_failslab+0x5/0x20 [ 1666.361590][T26632] __kmalloc_track_caller+0x6d/0x350 [ 1666.366867][T26632] ? trace_probe_init+0x1bd/0x250 [ 1666.371912][T26632] kstrdup+0x31/0x70 [ 1666.375805][T26632] trace_probe_init+0x1e1/0x250 [ 1666.380656][T26632] create_local_trace_uprobe+0xe3/0x3d0 [ 1666.386197][T26632] perf_uprobe_init+0xbe/0x140 [ 1666.390966][T26632] perf_uprobe_event_init+0xde/0x140 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x46000000, 0x0, 0x0, 0x0) [ 1666.396258][T26632] perf_try_init_event+0x21a/0x400 [ 1666.401446][T26632] perf_event_alloc+0xa60/0x1790 [ 1666.406393][T26632] __se_sys_perf_event_open+0x5db/0x2810 [ 1666.412050][T26632] ? proc_fail_nth_read+0x150/0x150 [ 1666.417267][T26632] __x64_sys_perf_event_open+0x63/0x70 [ 1666.422733][T26632] do_syscall_64+0x44/0xa0 [ 1666.427149][T26632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1666.433082][T26632] RIP: 0033:0x4665f9 [ 1666.436968][T26632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.456576][T26632] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1666.465067][T26632] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1666.473043][T26632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1666.481006][T26632] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.488981][T26632] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 0 (fault-call:2 fault-nth:10): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1666.496975][T26632] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1666.504979][T26632] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1666.515728][T26629] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x46010000, 0x0, 0x0, 0x0) [ 1666.554837][T26653] FAULT_INJECTION: forcing a failure. [ 1666.554837][T26653] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.567492][T26653] CPU: 0 PID: 26653 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1666.575983][T26653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.586053][T26653] Call Trace: [ 1666.589331][T26653] dump_stack_lvl+0xd6/0x122 [ 1666.593920][T26653] dump_stack+0x11/0x1b [ 1666.598123][T26653] should_fail+0x23c/0x250 04:46:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x47000000, 0x0, 0x0, 0x0) [ 1666.602536][T26653] ? create_local_trace_uprobe+0x247/0x3d0 [ 1666.608422][T26653] __should_failslab+0x81/0x90 [ 1666.613192][T26653] should_failslab+0x5/0x20 [ 1666.617797][T26653] __kmalloc_track_caller+0x6d/0x350 [ 1666.623077][T26653] kstrdup+0x31/0x70 [ 1666.626964][T26653] create_local_trace_uprobe+0x247/0x3d0 [ 1666.632599][T26653] perf_uprobe_init+0xbe/0x140 [ 1666.637363][T26653] perf_uprobe_event_init+0xde/0x140 [ 1666.642685][T26653] perf_try_init_event+0x21a/0x400 [ 1666.647798][T26653] perf_event_alloc+0xa60/0x1790 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x47010000, 0x0, 0x0, 0x0) [ 1666.652739][T26653] __se_sys_perf_event_open+0x5db/0x2810 [ 1666.658367][T26653] ? proc_fail_nth_read+0x150/0x150 [ 1666.663635][T26653] __x64_sys_perf_event_open+0x63/0x70 [ 1666.669103][T26653] do_syscall_64+0x44/0xa0 [ 1666.673523][T26653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1666.679429][T26653] RIP: 0033:0x4665f9 [ 1666.683329][T26653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.702940][T26653] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1666.711415][T26653] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1666.719379][T26653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1666.727342][T26653] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.735400][T26653] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1666.743352][T26653] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x48000000, 0x0, 0x0, 0x0) [ 1666.761766][T26654] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1666.793773][T26673] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff070000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 0 (fault-call:2 fault-nth:11): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x48010000, 0x0, 0x0, 0x0) [ 1666.842212][T26678] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1666.881979][T26687] FAULT_INJECTION: forcing a failure. 04:46:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1666.881979][T26687] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.894652][T26687] CPU: 0 PID: 26687 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1666.903092][T26687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.913147][T26687] Call Trace: [ 1666.916423][T26687] dump_stack_lvl+0xd6/0x122 [ 1666.921015][T26687] dump_stack+0x11/0x1b [ 1666.925169][T26687] should_fail+0x23c/0x250 [ 1666.929572][T26687] ? traceprobe_set_print_fmt+0x45/0x90 [ 1666.935111][T26687] __should_failslab+0x81/0x90 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x49000000, 0x0, 0x0, 0x0) [ 1666.939877][T26687] should_failslab+0x5/0x20 [ 1666.944371][T26687] __kmalloc+0x6f/0x350 [ 1666.948524][T26687] ? __kmalloc_track_caller+0x247/0x350 [ 1666.954072][T26687] traceprobe_set_print_fmt+0x45/0x90 [ 1666.959441][T26687] create_local_trace_uprobe+0x2fd/0x3d0 [ 1666.965070][T26687] perf_uprobe_init+0xbe/0x140 [ 1666.969908][T26687] perf_uprobe_event_init+0xde/0x140 [ 1666.975250][T26687] perf_try_init_event+0x21a/0x400 [ 1666.980453][T26687] perf_event_alloc+0xa60/0x1790 [ 1666.985391][T26687] __se_sys_perf_event_open+0x5db/0x2810 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x49010000, 0x0, 0x0, 0x0) [ 1666.991093][T26687] ? proc_fail_nth_read+0x150/0x150 [ 1666.996304][T26687] __x64_sys_perf_event_open+0x63/0x70 [ 1667.001807][T26687] do_syscall_64+0x44/0xa0 [ 1667.006249][T26687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1667.012148][T26687] RIP: 0033:0x4665f9 [ 1667.016043][T26687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.035642][T26687] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1667.044035][T26687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1667.052038][T26687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1667.059999][T26687] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.067971][T26687] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1667.075940][T26687] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 0 (fault-call:2 fault-nth:12): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1667.102840][T26695] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4a000000, 0x0, 0x0, 0x0) 04:46:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1667.156739][T26711] FAULT_INJECTION: forcing a failure. [ 1667.156739][T26711] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.169358][T26711] CPU: 1 PID: 26711 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1667.177770][T26711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.187817][T26711] Call Trace: [ 1667.191092][T26711] dump_stack_lvl+0xd6/0x122 [ 1667.195686][T26711] dump_stack+0x11/0x1b [ 1667.199877][T26711] should_fail+0x23c/0x250 04:46:05 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4a010000, 0x0, 0x0, 0x0) [ 1667.204296][T26711] __should_failslab+0x81/0x90 [ 1667.209064][T26711] ? __uprobe_register+0xfe/0x8b0 [ 1667.214092][T26711] should_failslab+0x5/0x20 [ 1667.218592][T26711] kmem_cache_alloc_trace+0x52/0x320 [ 1667.223896][T26711] __uprobe_register+0xfe/0x8b0 [ 1667.228753][T26711] ? _find_next_bit+0x188/0x190 [ 1667.233604][T26711] uprobe_register_refctr+0x29/0x40 [ 1667.238856][T26711] probe_event_enable+0x2be/0x7d0 [ 1667.243983][T26711] ? __uprobe_trace_func+0x440/0x440 [ 1667.249301][T26711] trace_uprobe_register+0x88/0x410 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4b000000, 0x0, 0x0, 0x0) [ 1667.254497][T26711] perf_trace_event_init+0x34e/0x790 [ 1667.259789][T26711] perf_uprobe_init+0xf5/0x140 [ 1667.264601][T26711] perf_uprobe_event_init+0xde/0x140 [ 1667.269893][T26711] perf_try_init_event+0x21a/0x400 [ 1667.275143][T26711] perf_event_alloc+0xa60/0x1790 [ 1667.280083][T26711] __se_sys_perf_event_open+0x5db/0x2810 [ 1667.285710][T26711] ? proc_fail_nth_read+0x150/0x150 [ 1667.290913][T26711] __x64_sys_perf_event_open+0x63/0x70 [ 1667.296447][T26711] do_syscall_64+0x44/0xa0 [ 1667.300992][T26711] entry_SYSCALL_64_after_hwframe+0x44/0xae 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4b010000, 0x0, 0x0, 0x0) [ 1667.307002][T26711] RIP: 0033:0x4665f9 [ 1667.310888][T26711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.330493][T26711] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1667.338985][T26711] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1667.346963][T26711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:06 executing program 0 (fault-call:2 fault-nth:13): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1667.354983][T26711] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.362951][T26711] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1667.370918][T26711] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1667.382279][T26710] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1667.410352][T26734] FAULT_INJECTION: forcing a failure. [ 1667.410352][T26734] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.423000][T26734] CPU: 0 PID: 26734 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1667.431406][T26734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.441457][T26734] Call Trace: [ 1667.444719][T26734] dump_stack_lvl+0xd6/0x122 [ 1667.449293][T26734] dump_stack+0x11/0x1b [ 1667.453428][T26734] should_fail+0x23c/0x250 [ 1667.457824][T26734] __should_failslab+0x81/0x90 [ 1667.462690][T26734] ? register_for_each_vma+0x372/0x890 [ 1667.468135][T26734] should_failslab+0x5/0x20 [ 1667.472696][T26734] kmem_cache_alloc_trace+0x52/0x320 [ 1667.477963][T26734] register_for_each_vma+0x372/0x890 [ 1667.483240][T26734] __uprobe_register+0x404/0x8b0 [ 1667.488158][T26734] uprobe_register_refctr+0x29/0x40 [ 1667.493341][T26734] probe_event_enable+0x2be/0x7d0 [ 1667.498397][T26734] ? __uprobe_trace_func+0x440/0x440 [ 1667.503711][T26734] trace_uprobe_register+0x88/0x410 [ 1667.508892][T26734] perf_trace_event_init+0x34e/0x790 [ 1667.514233][T26734] perf_uprobe_init+0xf5/0x140 [ 1667.519022][T26734] perf_uprobe_event_init+0xde/0x140 [ 1667.524325][T26734] perf_try_init_event+0x21a/0x400 [ 1667.529466][T26734] perf_event_alloc+0xa60/0x1790 [ 1667.534437][T26734] __se_sys_perf_event_open+0x5db/0x2810 [ 1667.540069][T26734] ? proc_fail_nth_read+0x150/0x150 [ 1667.545251][T26734] __x64_sys_perf_event_open+0x63/0x70 [ 1667.550708][T26734] do_syscall_64+0x44/0xa0 [ 1667.555120][T26734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1667.561011][T26734] RIP: 0033:0x4665f9 [ 1667.564891][T26734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.584478][T26734] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1667.592905][T26734] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1667.600854][T26734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4c000000, 0x0, 0x0, 0x0) 04:46:06 executing program 0 (fault-call:2 fault-nth:14): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1667.608811][T26734] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.616767][T26734] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1667.624721][T26734] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4c010000, 0x0, 0x0, 0x0) [ 1667.692232][T26739] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1667.717228][T26746] FAULT_INJECTION: forcing a failure. [ 1667.717228][T26746] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.729874][T26746] CPU: 0 PID: 26746 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1667.738287][T26746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.748336][T26746] Call Trace: [ 1667.751610][T26746] dump_stack_lvl+0xd6/0x122 [ 1667.756209][T26746] dump_stack+0x11/0x1b [ 1667.760374][T26746] should_fail+0x23c/0x250 [ 1667.764791][T26746] __should_failslab+0x81/0x90 [ 1667.769606][T26746] ? register_for_each_vma+0x372/0x890 [ 1667.775063][T26746] should_failslab+0x5/0x20 [ 1667.779550][T26746] kmem_cache_alloc_trace+0x52/0x320 [ 1667.784815][T26746] ? register_for_each_vma+0x372/0x890 [ 1667.790254][T26746] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1667.796300][T26746] register_for_each_vma+0x372/0x890 [ 1667.801609][T26746] __uprobe_register+0x404/0x8b0 [ 1667.806557][T26746] uprobe_register_refctr+0x29/0x40 [ 1667.811816][T26746] probe_event_enable+0x2be/0x7d0 [ 1667.816816][T26746] ? __uprobe_trace_func+0x440/0x440 [ 1667.822165][T26746] trace_uprobe_register+0x88/0x410 [ 1667.827379][T26746] perf_trace_event_init+0x34e/0x790 [ 1667.832704][T26746] perf_uprobe_init+0xf5/0x140 [ 1667.837473][T26746] perf_uprobe_event_init+0xde/0x140 [ 1667.842752][T26746] perf_try_init_event+0x21a/0x400 [ 1667.847888][T26746] perf_event_alloc+0xa60/0x1790 [ 1667.852842][T26746] __se_sys_perf_event_open+0x5db/0x2810 [ 1667.858528][T26746] ? proc_fail_nth_read+0x150/0x150 [ 1667.863850][T26746] __x64_sys_perf_event_open+0x63/0x70 [ 1667.869388][T26746] do_syscall_64+0x44/0xa0 [ 1667.873797][T26746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1667.879712][T26746] RIP: 0033:0x4665f9 [ 1667.883635][T26746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.903280][T26746] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1667.911672][T26746] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1667.919622][T26746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1667.927577][T26746] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.935539][T26746] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4d000000, 0x0, 0x0, 0x0) 04:46:06 executing program 0 (fault-call:2 fault-nth:15): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1667.943495][T26746] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1667.954310][T26747] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.027211][T26762] FAULT_INJECTION: forcing a failure. [ 1668.027211][T26762] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.039935][T26762] CPU: 0 PID: 26762 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1668.048330][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.058364][T26762] Call Trace: [ 1668.061626][T26762] dump_stack_lvl+0xd6/0x122 [ 1668.066203][T26762] dump_stack+0x11/0x1b [ 1668.070337][T26762] should_fail+0x23c/0x250 [ 1668.074751][T26762] __should_failslab+0x81/0x90 [ 1668.079507][T26762] ? register_for_each_vma+0x372/0x890 [ 1668.084944][T26762] should_failslab+0x5/0x20 [ 1668.089439][T26762] kmem_cache_alloc_trace+0x52/0x320 [ 1668.094729][T26762] ? register_for_each_vma+0x372/0x890 [ 1668.100169][T26762] ? vma_interval_tree_iter_next+0x263/0x280 [ 1668.106132][T26762] register_for_each_vma+0x372/0x890 [ 1668.111396][T26762] __uprobe_register+0x404/0x8b0 [ 1668.116320][T26762] uprobe_register_refctr+0x29/0x40 [ 1668.121530][T26762] probe_event_enable+0x2be/0x7d0 [ 1668.126539][T26762] ? __uprobe_trace_func+0x440/0x440 [ 1668.131841][T26762] trace_uprobe_register+0x88/0x410 [ 1668.137028][T26762] perf_trace_event_init+0x34e/0x790 [ 1668.142318][T26762] perf_uprobe_init+0xf5/0x140 [ 1668.147066][T26762] perf_uprobe_event_init+0xde/0x140 [ 1668.152408][T26762] perf_try_init_event+0x21a/0x400 [ 1668.157594][T26762] perf_event_alloc+0xa60/0x1790 [ 1668.162517][T26762] __se_sys_perf_event_open+0x5db/0x2810 [ 1668.168214][T26762] ? proc_fail_nth_read+0x150/0x150 [ 1668.173397][T26762] __x64_sys_perf_event_open+0x63/0x70 [ 1668.178844][T26762] do_syscall_64+0x44/0xa0 [ 1668.183246][T26762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.189177][T26762] RIP: 0033:0x4665f9 [ 1668.193063][T26762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.212658][T26762] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:06 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4d010000, 0x0, 0x0, 0x0) [ 1668.221204][T26762] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1668.229169][T26762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1668.237131][T26762] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.245125][T26762] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1668.253135][T26762] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 0 (fault-call:2 fault-nth:16): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4e000000, 0x0, 0x0, 0x0) 04:46:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.283733][T26766] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.360012][T26781] FAULT_INJECTION: forcing a failure. [ 1668.360012][T26781] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.372814][T26781] CPU: 1 PID: 26781 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1668.381234][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.391280][T26781] Call Trace: [ 1668.394559][T26781] dump_stack_lvl+0xd6/0x122 [ 1668.399161][T26781] dump_stack+0x11/0x1b [ 1668.403398][T26781] should_fail+0x23c/0x250 [ 1668.407870][T26781] __should_failslab+0x81/0x90 [ 1668.412707][T26781] ? register_for_each_vma+0x372/0x890 [ 1668.418289][T26781] should_failslab+0x5/0x20 [ 1668.422844][T26781] kmem_cache_alloc_trace+0x52/0x320 [ 1668.428152][T26781] ? register_for_each_vma+0x372/0x890 [ 1668.433599][T26781] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1668.439562][T26781] register_for_each_vma+0x372/0x890 [ 1668.444894][T26781] __uprobe_register+0x404/0x8b0 [ 1668.449812][T26781] uprobe_register_refctr+0x29/0x40 [ 1668.455007][T26781] probe_event_enable+0x2be/0x7d0 [ 1668.460060][T26781] ? __uprobe_trace_func+0x440/0x440 [ 1668.465330][T26781] trace_uprobe_register+0x88/0x410 [ 1668.470515][T26781] perf_trace_event_init+0x34e/0x790 [ 1668.475778][T26781] perf_uprobe_init+0xf5/0x140 [ 1668.480522][T26781] perf_uprobe_event_init+0xde/0x140 [ 1668.485864][T26781] perf_try_init_event+0x21a/0x400 [ 1668.490971][T26781] perf_event_alloc+0xa60/0x1790 [ 1668.496038][T26781] __se_sys_perf_event_open+0x5db/0x2810 [ 1668.501699][T26781] ? proc_fail_nth_read+0x150/0x150 [ 1668.506897][T26781] __x64_sys_perf_event_open+0x63/0x70 [ 1668.512350][T26781] do_syscall_64+0x44/0xa0 [ 1668.516758][T26781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.522653][T26781] RIP: 0033:0x4665f9 [ 1668.526530][T26781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.546131][T26781] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4e010000, 0x0, 0x0, 0x0) [ 1668.554594][T26781] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1668.562560][T26781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1668.570533][T26781] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.578521][T26781] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1668.586485][T26781] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:07 executing program 0 (fault-call:2 fault-nth:17): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.616731][T26784] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1668.664677][T26799] FAULT_INJECTION: forcing a failure. [ 1668.664677][T26799] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.677332][T26799] CPU: 1 PID: 26799 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1668.685753][T26799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.695806][T26799] Call Trace: [ 1668.699080][T26799] dump_stack_lvl+0xd6/0x122 [ 1668.703665][T26799] dump_stack+0x11/0x1b [ 1668.707812][T26799] should_fail+0x23c/0x250 [ 1668.712296][T26799] __should_failslab+0x81/0x90 [ 1668.717096][T26799] ? register_for_each_vma+0x372/0x890 [ 1668.722554][T26799] should_failslab+0x5/0x20 [ 1668.727039][T26799] kmem_cache_alloc_trace+0x52/0x320 [ 1668.732373][T26799] ? register_for_each_vma+0x372/0x890 [ 1668.737830][T26799] ? vma_interval_tree_iter_next+0x263/0x280 [ 1668.743855][T26799] register_for_each_vma+0x372/0x890 [ 1668.749130][T26799] __uprobe_register+0x404/0x8b0 [ 1668.754060][T26799] uprobe_register_refctr+0x29/0x40 [ 1668.759240][T26799] probe_event_enable+0x2be/0x7d0 [ 1668.764250][T26799] ? __uprobe_trace_func+0x440/0x440 [ 1668.769536][T26799] trace_uprobe_register+0x88/0x410 [ 1668.774726][T26799] perf_trace_event_init+0x34e/0x790 [ 1668.780012][T26799] perf_uprobe_init+0xf5/0x140 [ 1668.784833][T26799] perf_uprobe_event_init+0xde/0x140 [ 1668.790109][T26799] perf_try_init_event+0x21a/0x400 [ 1668.795291][T26799] perf_event_alloc+0xa60/0x1790 [ 1668.800218][T26799] __se_sys_perf_event_open+0x5db/0x2810 [ 1668.805838][T26799] ? proc_fail_nth_read+0x150/0x150 [ 1668.811101][T26799] __x64_sys_perf_event_open+0x63/0x70 [ 1668.816541][T26799] do_syscall_64+0x44/0xa0 [ 1668.820941][T26799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.826923][T26799] RIP: 0033:0x4665f9 [ 1668.830875][T26799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.850475][T26799] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4f000000, 0x0, 0x0, 0x0) [ 1668.858883][T26799] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1668.866958][T26799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1668.874907][T26799] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.882858][T26799] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1668.890811][T26799] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:07 executing program 0 (fault-call:2 fault-nth:18): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.926185][T26803] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @perf_bp={&(0x7f0000000000), 0x500}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1668.977078][T26815] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1668.992703][T26817] FAULT_INJECTION: forcing a failure. [ 1668.992703][T26817] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.005338][T26817] CPU: 1 PID: 26817 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1669.013838][T26817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.023911][T26817] Call Trace: [ 1669.027228][T26817] dump_stack_lvl+0xd6/0x122 [ 1669.031809][T26817] dump_stack+0x11/0x1b [ 1669.035947][T26817] should_fail+0x23c/0x250 [ 1669.040342][T26817] __should_failslab+0x81/0x90 [ 1669.045127][T26817] ? register_for_each_vma+0x372/0x890 [ 1669.050567][T26817] should_failslab+0x5/0x20 [ 1669.055062][T26817] kmem_cache_alloc_trace+0x52/0x320 [ 1669.060338][T26817] ? register_for_each_vma+0x372/0x890 [ 1669.065780][T26817] ? vma_interval_tree_iter_next+0x263/0x280 [ 1669.071761][T26817] register_for_each_vma+0x372/0x890 [ 1669.077191][T26817] __uprobe_register+0x404/0x8b0 [ 1669.082115][T26817] uprobe_register_refctr+0x29/0x40 [ 1669.087291][T26817] probe_event_enable+0x2be/0x7d0 [ 1669.092330][T26817] ? __uprobe_trace_func+0x440/0x440 [ 1669.097653][T26817] trace_uprobe_register+0x88/0x410 [ 1669.102879][T26817] perf_trace_event_init+0x34e/0x790 [ 1669.108151][T26817] perf_uprobe_init+0xf5/0x140 [ 1669.112936][T26817] perf_uprobe_event_init+0xde/0x140 [ 1669.118268][T26817] perf_try_init_event+0x21a/0x400 [ 1669.123363][T26817] perf_event_alloc+0xa60/0x1790 [ 1669.128289][T26817] __se_sys_perf_event_open+0x5db/0x2810 [ 1669.133934][T26817] ? proc_fail_nth_read+0x150/0x150 [ 1669.139137][T26817] __x64_sys_perf_event_open+0x63/0x70 [ 1669.144711][T26817] do_syscall_64+0x44/0xa0 [ 1669.149119][T26817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.155046][T26817] RIP: 0033:0x4665f9 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x4f010000, 0x0, 0x0, 0x0) 04:46:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1669.159017][T26817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.178632][T26817] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1669.187127][T26817] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1669.195092][T26817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1669.203104][T26817] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.211055][T26817] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1669.219026][T26817] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1669.258441][T26824] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:08 executing program 0 (fault-call:2 fault-nth:19): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x50000000, 0x0, 0x0, 0x0) [ 1669.304386][T26832] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1669.343320][T26835] FAULT_INJECTION: forcing a failure. [ 1669.343320][T26835] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.355983][T26835] CPU: 1 PID: 26835 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1669.364397][T26835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.374532][T26835] Call Trace: [ 1669.377810][T26835] dump_stack_lvl+0xd6/0x122 [ 1669.382404][T26835] dump_stack+0x11/0x1b [ 1669.386564][T26835] should_fail+0x23c/0x250 [ 1669.391057][T26835] __should_failslab+0x81/0x90 [ 1669.395820][T26835] ? register_for_each_vma+0x372/0x890 [ 1669.401376][T26835] should_failslab+0x5/0x20 [ 1669.405884][T26835] kmem_cache_alloc_trace+0x52/0x320 [ 1669.411153][T26835] ? register_for_each_vma+0x372/0x890 [ 1669.416737][T26835] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1669.422880][T26835] register_for_each_vma+0x372/0x890 [ 1669.428150][T26835] __uprobe_register+0x404/0x8b0 [ 1669.433237][T26835] uprobe_register_refctr+0x29/0x40 [ 1669.438488][T26835] probe_event_enable+0x2be/0x7d0 [ 1669.443506][T26835] ? __uprobe_trace_func+0x440/0x440 [ 1669.448781][T26835] trace_uprobe_register+0x88/0x410 [ 1669.454044][T26835] perf_trace_event_init+0x34e/0x790 [ 1669.459376][T26835] perf_uprobe_init+0xf5/0x140 [ 1669.464124][T26835] perf_uprobe_event_init+0xde/0x140 [ 1669.469434][T26835] perf_try_init_event+0x21a/0x400 [ 1669.474610][T26835] perf_event_alloc+0xa60/0x1790 [ 1669.479539][T26835] __se_sys_perf_event_open+0x5db/0x2810 [ 1669.485219][T26835] ? proc_fail_nth_read+0x150/0x150 [ 1669.490486][T26835] __x64_sys_perf_event_open+0x63/0x70 [ 1669.495947][T26835] do_syscall_64+0x44/0xa0 [ 1669.500429][T26835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.506307][T26835] RIP: 0033:0x4665f9 [ 1669.510181][T26835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.529877][T26835] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1669.538277][T26835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1669.546236][T26835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x50010000, 0x0, 0x0, 0x0) 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x51000000, 0x0, 0x0, 0x0) [ 1669.554197][T26835] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.562246][T26835] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1669.570204][T26835] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:08 executing program 0 (fault-call:2 fault-nth:20): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x502}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x51010000, 0x0, 0x0, 0x0) 04:46:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1669.622668][T26848] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1669.661600][T26859] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1669.693598][T26861] FAULT_INJECTION: forcing a failure. [ 1669.693598][T26861] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.706263][T26861] CPU: 1 PID: 26861 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1669.714810][T26861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.724854][T26861] Call Trace: [ 1669.728115][T26861] dump_stack_lvl+0xd6/0x122 [ 1669.732694][T26861] dump_stack+0x11/0x1b [ 1669.736829][T26861] should_fail+0x23c/0x250 [ 1669.741239][T26861] __should_failslab+0x81/0x90 [ 1669.745983][T26861] ? register_for_each_vma+0x372/0x890 [ 1669.751427][T26861] should_failslab+0x5/0x20 [ 1669.755956][T26861] kmem_cache_alloc_trace+0x52/0x320 [ 1669.761221][T26861] ? register_for_each_vma+0x372/0x890 [ 1669.766660][T26861] ? vma_interval_tree_iter_next+0x263/0x280 [ 1669.772621][T26861] register_for_each_vma+0x372/0x890 [ 1669.777884][T26861] __uprobe_register+0x404/0x8b0 [ 1669.782799][T26861] uprobe_register_refctr+0x29/0x40 [ 1669.787979][T26861] probe_event_enable+0x2be/0x7d0 [ 1669.793070][T26861] ? __uprobe_trace_func+0x440/0x440 [ 1669.798449][T26861] trace_uprobe_register+0x88/0x410 [ 1669.803627][T26861] perf_trace_event_init+0x34e/0x790 [ 1669.808892][T26861] perf_uprobe_init+0xf5/0x140 [ 1669.813660][T26861] perf_uprobe_event_init+0xde/0x140 [ 1669.818937][T26861] perf_try_init_event+0x21a/0x400 [ 1669.824029][T26861] perf_event_alloc+0xa60/0x1790 [ 1669.828971][T26861] __se_sys_perf_event_open+0x5db/0x2810 [ 1669.834613][T26861] ? proc_fail_nth_read+0x150/0x150 [ 1669.839841][T26861] __x64_sys_perf_event_open+0x63/0x70 [ 1669.845290][T26861] do_syscall_64+0x44/0xa0 [ 1669.849687][T26861] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.855632][T26861] RIP: 0033:0x4665f9 [ 1669.859511][T26861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.879630][T26861] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:08 executing program 0 (fault-call:2 fault-nth:21): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1669.888023][T26861] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1669.896061][T26861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1669.904010][T26861] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.912005][T26861] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1669.919964][T26861] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x52000000, 0x0, 0x0, 0x0) 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x52010000, 0x0, 0x0, 0x0) [ 1669.972380][T26873] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1670.009132][T26878] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1670.035845][T26877] FAULT_INJECTION: forcing a failure. [ 1670.035845][T26877] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.048591][T26877] CPU: 1 PID: 26877 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1670.057003][T26877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.067055][T26877] Call Trace: [ 1670.070330][T26877] dump_stack_lvl+0xd6/0x122 [ 1670.074983][T26877] dump_stack+0x11/0x1b [ 1670.079162][T26877] should_fail+0x23c/0x250 [ 1670.083648][T26877] __should_failslab+0x81/0x90 [ 1670.088400][T26877] ? register_for_each_vma+0x372/0x890 [ 1670.093839][T26877] should_failslab+0x5/0x20 [ 1670.098323][T26877] kmem_cache_alloc_trace+0x52/0x320 [ 1670.103596][T26877] ? register_for_each_vma+0x372/0x890 [ 1670.109103][T26877] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1670.115091][T26877] register_for_each_vma+0x372/0x890 [ 1670.120414][T26877] __uprobe_register+0x404/0x8b0 [ 1670.125435][T26877] uprobe_register_refctr+0x29/0x40 [ 1670.130627][T26877] probe_event_enable+0x2be/0x7d0 [ 1670.135648][T26877] ? __uprobe_trace_func+0x440/0x440 [ 1670.141029][T26877] trace_uprobe_register+0x88/0x410 [ 1670.146223][T26877] perf_trace_event_init+0x34e/0x790 [ 1670.151692][T26877] perf_uprobe_init+0xf5/0x140 [ 1670.156443][T26877] perf_uprobe_event_init+0xde/0x140 [ 1670.161718][T26877] perf_try_init_event+0x21a/0x400 [ 1670.166830][T26877] perf_event_alloc+0xa60/0x1790 [ 1670.171751][T26877] __se_sys_perf_event_open+0x5db/0x2810 [ 1670.177398][T26877] ? proc_fail_nth_read+0x150/0x150 [ 1670.182591][T26877] __x64_sys_perf_event_open+0x63/0x70 [ 1670.188031][T26877] do_syscall_64+0x44/0xa0 [ 1670.192472][T26877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.198356][T26877] RIP: 0033:0x4665f9 [ 1670.202239][T26877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.222031][T26877] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:08 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x53000000, 0x0, 0x0, 0x0) 04:46:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x503}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1670.230433][T26877] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1670.238422][T26877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1670.246466][T26877] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.254429][T26877] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1670.262393][T26877] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:09 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 0 (fault-call:2 fault-nth:22): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x53010000, 0x0, 0x0, 0x0) [ 1670.324431][T26894] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1670.358532][T26904] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1670.369936][T26905] FAULT_INJECTION: forcing a failure. [ 1670.369936][T26905] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.382694][T26905] CPU: 1 PID: 26905 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1670.391136][T26905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.401189][T26905] Call Trace: [ 1670.404458][T26905] dump_stack_lvl+0xd6/0x122 [ 1670.409069][T26905] dump_stack+0x11/0x1b [ 1670.413220][T26905] should_fail+0x23c/0x250 [ 1670.417693][T26905] __should_failslab+0x81/0x90 [ 1670.422457][T26905] ? register_for_each_vma+0x372/0x890 [ 1670.428201][T26905] should_failslab+0x5/0x20 [ 1670.432706][T26905] kmem_cache_alloc_trace+0x52/0x320 [ 1670.437971][T26905] ? register_for_each_vma+0x372/0x890 [ 1670.443412][T26905] ? vma_interval_tree_iter_next+0x263/0x280 [ 1670.449382][T26905] register_for_each_vma+0x372/0x890 [ 1670.454655][T26905] __uprobe_register+0x404/0x8b0 [ 1670.459575][T26905] uprobe_register_refctr+0x29/0x40 [ 1670.464810][T26905] probe_event_enable+0x2be/0x7d0 [ 1670.469840][T26905] ? __uprobe_trace_func+0x440/0x440 [ 1670.475112][T26905] trace_uprobe_register+0x88/0x410 [ 1670.480346][T26905] perf_trace_event_init+0x34e/0x790 [ 1670.485660][T26905] perf_uprobe_init+0xf5/0x140 [ 1670.490412][T26905] perf_uprobe_event_init+0xde/0x140 [ 1670.495728][T26905] perf_try_init_event+0x21a/0x400 [ 1670.500832][T26905] perf_event_alloc+0xa60/0x1790 [ 1670.505769][T26905] __se_sys_perf_event_open+0x5db/0x2810 [ 1670.511404][T26905] ? proc_fail_nth_read+0x150/0x150 [ 1670.516636][T26905] __x64_sys_perf_event_open+0x63/0x70 [ 1670.522118][T26905] do_syscall_64+0x44/0xa0 [ 1670.526522][T26905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.532465][T26905] RIP: 0033:0x4665f9 [ 1670.536335][T26905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.555926][T26905] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1670.564378][T26905] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 04:46:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x54000000, 0x0, 0x0, 0x0) 04:46:09 executing program 0 (fault-call:2 fault-nth:23): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1670.572335][T26905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1670.580383][T26905] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.588344][T26905] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1670.596327][T26905] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:09 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1670.651780][T26914] FAULT_INJECTION: forcing a failure. [ 1670.651780][T26914] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.664425][T26914] CPU: 0 PID: 26914 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1670.672856][T26914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.682980][T26914] Call Trace: [ 1670.686258][T26914] dump_stack_lvl+0xd6/0x122 [ 1670.690853][T26914] dump_stack+0x11/0x1b [ 1670.695007][T26914] should_fail+0x23c/0x250 [ 1670.699420][T26914] __should_failslab+0x81/0x90 [ 1670.704230][T26914] ? register_for_each_vma+0x372/0x890 [ 1670.709696][T26914] should_failslab+0x5/0x20 [ 1670.714202][T26914] kmem_cache_alloc_trace+0x52/0x320 [ 1670.719477][T26914] ? register_for_each_vma+0x372/0x890 [ 1670.724943][T26914] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1670.730922][T26914] register_for_each_vma+0x372/0x890 [ 1670.736207][T26914] __uprobe_register+0x404/0x8b0 [ 1670.741188][T26914] uprobe_register_refctr+0x29/0x40 [ 1670.746440][T26914] probe_event_enable+0x2be/0x7d0 [ 1670.751446][T26914] ? __uprobe_trace_func+0x440/0x440 [ 1670.756798][T26914] trace_uprobe_register+0x88/0x410 [ 1670.761986][T26914] perf_trace_event_init+0x34e/0x790 [ 1670.767255][T26914] perf_uprobe_init+0xf5/0x140 [ 1670.772001][T26914] perf_uprobe_event_init+0xde/0x140 [ 1670.777347][T26914] perf_try_init_event+0x21a/0x400 [ 1670.782500][T26914] perf_event_alloc+0xa60/0x1790 [ 1670.787413][T26914] __se_sys_perf_event_open+0x5db/0x2810 [ 1670.793036][T26914] ? proc_fail_nth_read+0x150/0x150 [ 1670.798271][T26914] __x64_sys_perf_event_open+0x63/0x70 [ 1670.803706][T26914] do_syscall_64+0x44/0xa0 [ 1670.808102][T26914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.814057][T26914] RIP: 0033:0x4665f9 [ 1670.817940][T26914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.837547][T26914] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x504}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x54010000, 0x0, 0x0, 0x0) [ 1670.845962][T26914] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1670.853931][T26914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1670.861880][T26914] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.869830][T26914] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1670.877779][T26914] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:09 executing program 0 (fault-call:2 fault-nth:24): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1670.899797][T26913] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x55000000, 0x0, 0x0, 0x0) [ 1670.945126][T26925] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1670.989809][T26932] FAULT_INJECTION: forcing a failure. [ 1670.989809][T26932] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.002430][T26932] CPU: 0 PID: 26932 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1671.010980][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.021028][T26932] Call Trace: [ 1671.024299][T26932] dump_stack_lvl+0xd6/0x122 [ 1671.028984][T26932] dump_stack+0x11/0x1b [ 1671.033205][T26932] should_fail+0x23c/0x250 [ 1671.037618][T26932] __should_failslab+0x81/0x90 [ 1671.042425][T26932] ? register_for_each_vma+0x372/0x890 [ 1671.047901][T26932] should_failslab+0x5/0x20 [ 1671.052463][T26932] kmem_cache_alloc_trace+0x52/0x320 [ 1671.057747][T26932] ? register_for_each_vma+0x372/0x890 [ 1671.063202][T26932] ? vma_interval_tree_iter_next+0x263/0x280 [ 1671.069180][T26932] register_for_each_vma+0x372/0x890 [ 1671.074444][T26932] __uprobe_register+0x404/0x8b0 [ 1671.079362][T26932] uprobe_register_refctr+0x29/0x40 [ 1671.084563][T26932] probe_event_enable+0x2be/0x7d0 [ 1671.089573][T26932] ? __uprobe_trace_func+0x440/0x440 [ 1671.094854][T26932] trace_uprobe_register+0x88/0x410 [ 1671.100030][T26932] perf_trace_event_init+0x34e/0x790 [ 1671.105304][T26932] perf_uprobe_init+0xf5/0x140 [ 1671.110059][T26932] perf_uprobe_event_init+0xde/0x140 [ 1671.115324][T26932] perf_try_init_event+0x21a/0x400 [ 1671.120526][T26932] perf_event_alloc+0xa60/0x1790 [ 1671.125498][T26932] __se_sys_perf_event_open+0x5db/0x2810 [ 1671.131139][T26932] ? proc_fail_nth_read+0x150/0x150 [ 1671.136397][T26932] __x64_sys_perf_event_open+0x63/0x70 [ 1671.141841][T26932] do_syscall_64+0x44/0xa0 [ 1671.146247][T26932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1671.152205][T26932] RIP: 0033:0x4665f9 [ 1671.156073][T26932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1671.175667][T26932] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:09 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:09 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x55010000, 0x0, 0x0, 0x0) [ 1671.184119][T26932] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1671.192069][T26932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1671.200031][T26932] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.208123][T26932] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1671.216112][T26932] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 0 (fault-call:2 fault-nth:25): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x505}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1671.242843][T26938] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1671.273472][T26947] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x56000000, 0x0, 0x0, 0x0) [ 1671.327456][T26954] FAULT_INJECTION: forcing a failure. [ 1671.327456][T26954] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.340100][T26954] CPU: 0 PID: 26954 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1671.348584][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.358638][T26954] Call Trace: [ 1671.361909][T26954] dump_stack_lvl+0xd6/0x122 [ 1671.366479][T26954] dump_stack+0x11/0x1b [ 1671.370617][T26954] should_fail+0x23c/0x250 [ 1671.375022][T26954] __should_failslab+0x81/0x90 [ 1671.379840][T26954] ? register_for_each_vma+0x372/0x890 [ 1671.385283][T26954] should_failslab+0x5/0x20 [ 1671.389765][T26954] kmem_cache_alloc_trace+0x52/0x320 [ 1671.395138][T26954] ? register_for_each_vma+0x372/0x890 [ 1671.400660][T26954] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1671.406737][T26954] register_for_each_vma+0x372/0x890 [ 1671.412002][T26954] __uprobe_register+0x404/0x8b0 [ 1671.416951][T26954] uprobe_register_refctr+0x29/0x40 [ 1671.422152][T26954] probe_event_enable+0x2be/0x7d0 [ 1671.427254][T26954] ? __uprobe_trace_func+0x440/0x440 [ 1671.432515][T26954] trace_uprobe_register+0x88/0x410 [ 1671.437772][T26954] perf_trace_event_init+0x34e/0x790 [ 1671.443053][T26954] perf_uprobe_init+0xf5/0x140 [ 1671.447844][T26954] perf_uprobe_event_init+0xde/0x140 [ 1671.453127][T26954] perf_try_init_event+0x21a/0x400 [ 1671.458218][T26954] perf_event_alloc+0xa60/0x1790 [ 1671.463154][T26954] __se_sys_perf_event_open+0x5db/0x2810 [ 1671.468780][T26954] ? proc_fail_nth_read+0x150/0x150 [ 1671.474026][T26954] __x64_sys_perf_event_open+0x63/0x70 [ 1671.479465][T26954] do_syscall_64+0x44/0xa0 [ 1671.483872][T26954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1671.489744][T26954] RIP: 0033:0x4665f9 [ 1671.493622][T26954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1671.513293][T26954] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x56010000, 0x0, 0x0, 0x0) 04:46:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1671.521687][T26954] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1671.529634][T26954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1671.537606][T26954] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.545560][T26954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1671.553521][T26954] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x57000000, 0x0, 0x0, 0x0) 04:46:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x506}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 0 (fault-call:2 fault-nth:26): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1671.626780][T26968] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x57010000, 0x0, 0x0, 0x0) [ 1671.668694][T26977] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1671.700502][T26979] FAULT_INJECTION: forcing a failure. [ 1671.700502][T26979] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.713197][T26979] CPU: 0 PID: 26979 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1671.721593][T26979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.731737][T26979] Call Trace: [ 1671.735003][T26979] dump_stack_lvl+0xd6/0x122 [ 1671.739574][T26979] dump_stack+0x11/0x1b [ 1671.743719][T26979] should_fail+0x23c/0x250 [ 1671.748111][T26979] __should_failslab+0x81/0x90 [ 1671.752864][T26979] ? register_for_each_vma+0x372/0x890 [ 1671.758346][T26979] should_failslab+0x5/0x20 [ 1671.762852][T26979] kmem_cache_alloc_trace+0x52/0x320 [ 1671.768114][T26979] ? register_for_each_vma+0x372/0x890 [ 1671.773617][T26979] ? vma_interval_tree_iter_next+0x263/0x280 [ 1671.779609][T26979] register_for_each_vma+0x372/0x890 [ 1671.784887][T26979] __uprobe_register+0x404/0x8b0 [ 1671.789817][T26979] uprobe_register_refctr+0x29/0x40 [ 1671.795003][T26979] probe_event_enable+0x2be/0x7d0 [ 1671.800008][T26979] ? __uprobe_trace_func+0x440/0x440 [ 1671.805281][T26979] trace_uprobe_register+0x88/0x410 [ 1671.810467][T26979] perf_trace_event_init+0x34e/0x790 [ 1671.815730][T26979] perf_uprobe_init+0xf5/0x140 [ 1671.820476][T26979] perf_uprobe_event_init+0xde/0x140 [ 1671.825746][T26979] perf_try_init_event+0x21a/0x400 [ 1671.830837][T26979] perf_event_alloc+0xa60/0x1790 [ 1671.835808][T26979] __se_sys_perf_event_open+0x5db/0x2810 [ 1671.841427][T26979] ? finish_task_switch+0xce/0x290 [ 1671.846523][T26979] __x64_sys_perf_event_open+0x63/0x70 [ 1671.852012][T26979] do_syscall_64+0x44/0xa0 [ 1671.856422][T26979] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1671.862306][T26979] RIP: 0033:0x4665f9 [ 1671.866175][T26979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1671.885835][T26979] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1671.894221][T26979] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1671.902179][T26979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1671.910123][T26979] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:10 executing program 0 (fault-call:2 fault-nth:27): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1671.918067][T26979] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1671.926016][T26979] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x58000000, 0x0, 0x0, 0x0) 04:46:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x507}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1671.977933][T26989] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1672.012101][T26995] FAULT_INJECTION: forcing a failure. [ 1672.012101][T26995] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.024782][T26995] CPU: 1 PID: 26995 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1672.033267][T26995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.043313][T26995] Call Trace: [ 1672.046583][T26995] dump_stack_lvl+0xd6/0x122 [ 1672.051174][T26995] dump_stack+0x11/0x1b [ 1672.055321][T26995] should_fail+0x23c/0x250 [ 1672.059741][T26995] __should_failslab+0x81/0x90 [ 1672.064539][T26995] ? register_for_each_vma+0x372/0x890 [ 1672.070060][T26995] should_failslab+0x5/0x20 [ 1672.074637][T26995] kmem_cache_alloc_trace+0x52/0x320 [ 1672.079952][T26995] ? register_for_each_vma+0x372/0x890 [ 1672.085385][T26995] ? vma_interval_tree_iter_next+0x263/0x280 [ 1672.091386][T26995] register_for_each_vma+0x372/0x890 [ 1672.096648][T26995] __uprobe_register+0x404/0x8b0 [ 1672.101624][T26995] uprobe_register_refctr+0x29/0x40 [ 1672.106797][T26995] probe_event_enable+0x2be/0x7d0 [ 1672.111806][T26995] ? __uprobe_trace_func+0x440/0x440 [ 1672.117087][T26995] trace_uprobe_register+0x88/0x410 [ 1672.122281][T26995] perf_trace_event_init+0x34e/0x790 [ 1672.127545][T26995] perf_uprobe_init+0xf5/0x140 [ 1672.132342][T26995] perf_uprobe_event_init+0xde/0x140 [ 1672.137691][T26995] perf_try_init_event+0x21a/0x400 [ 1672.142885][T26995] perf_event_alloc+0xa60/0x1790 [ 1672.147837][T26995] __se_sys_perf_event_open+0x5db/0x2810 [ 1672.153444][T26995] ? proc_fail_nth_read+0x150/0x150 [ 1672.158635][T26995] __x64_sys_perf_event_open+0x63/0x70 [ 1672.164071][T26995] do_syscall_64+0x44/0xa0 [ 1672.168468][T26995] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1672.174338][T26995] RIP: 0033:0x4665f9 [ 1672.178210][T26995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.197805][T26995] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1672.206238][T26995] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1672.214202][T26995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:10 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x58010000, 0x0, 0x0, 0x0) [ 1672.222146][T26995] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.230112][T26995] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1672.238057][T26995] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1672.271197][T27002] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x59000000, 0x0, 0x0, 0x0) 04:46:11 executing program 0 (fault-call:2 fault-nth:28): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x508}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1672.405773][T27024] FAULT_INJECTION: forcing a failure. [ 1672.405773][T27024] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.418394][T27024] CPU: 0 PID: 27024 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1672.426797][T27024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.436869][T27024] Call Trace: [ 1672.440123][T27024] dump_stack_lvl+0xd6/0x122 [ 1672.444726][T27024] dump_stack+0x11/0x1b [ 1672.448856][T27024] should_fail+0x23c/0x250 [ 1672.453255][T27024] __should_failslab+0x81/0x90 [ 1672.457998][T27024] ? register_for_each_vma+0x372/0x890 [ 1672.463439][T27024] should_failslab+0x5/0x20 [ 1672.467932][T27024] kmem_cache_alloc_trace+0x52/0x320 [ 1672.473194][T27024] ? register_for_each_vma+0x372/0x890 [ 1672.478628][T27024] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1672.484628][T27024] register_for_each_vma+0x372/0x890 [ 1672.489997][T27024] __uprobe_register+0x404/0x8b0 [ 1672.494930][T27024] uprobe_register_refctr+0x29/0x40 [ 1672.500112][T27024] probe_event_enable+0x2be/0x7d0 [ 1672.505130][T27024] ? __uprobe_trace_func+0x440/0x440 [ 1672.510400][T27024] trace_uprobe_register+0x88/0x410 [ 1672.515579][T27024] perf_trace_event_init+0x34e/0x790 [ 1672.520870][T27024] perf_uprobe_init+0xf5/0x140 [ 1672.525631][T27024] perf_uprobe_event_init+0xde/0x140 [ 1672.530893][T27024] perf_try_init_event+0x21a/0x400 [ 1672.536069][T27024] perf_event_alloc+0xa60/0x1790 [ 1672.541131][T27024] __se_sys_perf_event_open+0x5db/0x2810 [ 1672.546741][T27024] ? proc_fail_nth_read+0x150/0x150 [ 1672.551944][T27024] __x64_sys_perf_event_open+0x63/0x70 [ 1672.557399][T27024] do_syscall_64+0x44/0xa0 [ 1672.561893][T27024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1672.567768][T27024] RIP: 0033:0x4665f9 [ 1672.571650][T27024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.591263][T27024] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x509}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x59010000, 0x0, 0x0, 0x0) 04:46:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 0 (fault-call:2 fault-nth:29): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1672.599710][T27024] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1672.607660][T27024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1672.615612][T27024] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.623573][T27024] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1672.631521][T27024] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:11 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5a000000, 0x0, 0x0, 0x0) [ 1672.696939][T27027] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1672.721461][T27040] FAULT_INJECTION: forcing a failure. [ 1672.721461][T27040] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.734104][T27040] CPU: 0 PID: 27040 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1672.742553][T27040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.752598][T27040] Call Trace: [ 1672.755857][T27040] dump_stack_lvl+0xd6/0x122 [ 1672.760430][T27040] dump_stack+0x11/0x1b [ 1672.764563][T27040] should_fail+0x23c/0x250 [ 1672.768956][T27040] __should_failslab+0x81/0x90 [ 1672.773694][T27040] ? register_for_each_vma+0x372/0x890 [ 1672.779143][T27040] should_failslab+0x5/0x20 [ 1672.783623][T27040] kmem_cache_alloc_trace+0x52/0x320 [ 1672.788883][T27040] ? register_for_each_vma+0x372/0x890 [ 1672.794317][T27040] ? vma_interval_tree_iter_next+0x263/0x280 [ 1672.800275][T27040] register_for_each_vma+0x372/0x890 [ 1672.805537][T27040] __uprobe_register+0x404/0x8b0 [ 1672.810511][T27040] uprobe_register_refctr+0x29/0x40 [ 1672.815686][T27040] probe_event_enable+0x2be/0x7d0 [ 1672.820694][T27040] ? __uprobe_trace_func+0x440/0x440 [ 1672.825977][T27040] trace_uprobe_register+0x88/0x410 [ 1672.831152][T27040] perf_trace_event_init+0x34e/0x790 [ 1672.836417][T27040] perf_uprobe_init+0xf5/0x140 [ 1672.841165][T27040] perf_uprobe_event_init+0xde/0x140 [ 1672.846443][T27040] perf_try_init_event+0x21a/0x400 [ 1672.851550][T27040] perf_event_alloc+0xa60/0x1790 [ 1672.856478][T27040] __se_sys_perf_event_open+0x5db/0x2810 [ 1672.862089][T27040] ? proc_fail_nth_read+0x150/0x150 [ 1672.867292][T27040] __x64_sys_perf_event_open+0x63/0x70 [ 1672.872781][T27040] do_syscall_64+0x44/0xa0 [ 1672.877197][T27040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1672.883133][T27040] RIP: 0033:0x4665f9 [ 1672.887015][T27040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.906663][T27040] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1672.915051][T27040] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1672.923000][T27040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1672.930953][T27040] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.938909][T27040] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:11 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5a010000, 0x0, 0x0, 0x0) 04:46:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x50a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1672.946882][T27040] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1672.975407][T27047] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:11 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5b000000, 0x0, 0x0, 0x0) 04:46:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x50b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 0 (fault-call:2 fault-nth:30): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x50c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1673.088961][T27067] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1673.116056][T27072] FAULT_INJECTION: forcing a failure. [ 1673.116056][T27072] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.128744][T27072] CPU: 1 PID: 27072 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1673.137151][T27072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.147213][T27072] Call Trace: [ 1673.150485][T27072] dump_stack_lvl+0xd6/0x122 [ 1673.155061][T27072] dump_stack+0x11/0x1b [ 1673.159207][T27072] should_fail+0x23c/0x250 [ 1673.163625][T27072] __should_failslab+0x81/0x90 [ 1673.168392][T27072] ? register_for_each_vma+0x372/0x890 [ 1673.173960][T27072] should_failslab+0x5/0x20 [ 1673.178476][T27072] kmem_cache_alloc_trace+0x52/0x320 [ 1673.183746][T27072] ? register_for_each_vma+0x372/0x890 [ 1673.189252][T27072] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1673.195217][T27072] register_for_each_vma+0x372/0x890 [ 1673.200662][T27072] __uprobe_register+0x404/0x8b0 [ 1673.205608][T27072] uprobe_register_refctr+0x29/0x40 [ 1673.210794][T27072] probe_event_enable+0x2be/0x7d0 [ 1673.215801][T27072] ? __uprobe_trace_func+0x440/0x440 [ 1673.221061][T27072] trace_uprobe_register+0x88/0x410 [ 1673.226240][T27072] perf_trace_event_init+0x34e/0x790 [ 1673.231509][T27072] perf_uprobe_init+0xf5/0x140 [ 1673.236259][T27072] perf_uprobe_event_init+0xde/0x140 [ 1673.241539][T27072] perf_try_init_event+0x21a/0x400 [ 1673.246633][T27072] perf_event_alloc+0xa60/0x1790 [ 1673.251717][T27072] __se_sys_perf_event_open+0x5db/0x2810 [ 1673.257411][T27072] ? proc_fail_nth_read+0x150/0x150 [ 1673.262594][T27072] __x64_sys_perf_event_open+0x63/0x70 [ 1673.268038][T27072] do_syscall_64+0x44/0xa0 [ 1673.272511][T27072] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1673.278487][T27072] RIP: 0033:0x4665f9 [ 1673.282390][T27072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.301984][T27072] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1673.310391][T27072] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1673.318350][T27072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1673.326306][T27072] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5b010000, 0x0, 0x0, 0x0) 04:46:12 executing program 0 (fault-call:2 fault-nth:31): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1673.334260][T27072] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1673.342250][T27072] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5c000000, 0x0, 0x0, 0x0) [ 1673.381653][T27077] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1673.437804][T27085] FAULT_INJECTION: forcing a failure. [ 1673.437804][T27085] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.450486][T27085] CPU: 1 PID: 27085 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1673.458901][T27085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.468954][T27085] Call Trace: [ 1673.472228][T27085] dump_stack_lvl+0xd6/0x122 [ 1673.476879][T27085] dump_stack+0x11/0x1b [ 1673.481030][T27085] should_fail+0x23c/0x250 [ 1673.485440][T27085] __should_failslab+0x81/0x90 [ 1673.490207][T27085] ? register_for_each_vma+0x372/0x890 [ 1673.495662][T27085] should_failslab+0x5/0x20 [ 1673.500155][T27085] kmem_cache_alloc_trace+0x52/0x320 [ 1673.505440][T27085] ? register_for_each_vma+0x372/0x890 [ 1673.510881][T27085] ? vma_interval_tree_iter_next+0x263/0x280 [ 1673.516842][T27085] register_for_each_vma+0x372/0x890 [ 1673.522118][T27085] __uprobe_register+0x404/0x8b0 [ 1673.527037][T27085] uprobe_register_refctr+0x29/0x40 [ 1673.532216][T27085] probe_event_enable+0x2be/0x7d0 [ 1673.537222][T27085] ? __uprobe_trace_func+0x440/0x440 [ 1673.542493][T27085] trace_uprobe_register+0x88/0x410 [ 1673.547690][T27085] perf_trace_event_init+0x34e/0x790 [ 1673.552954][T27085] perf_uprobe_init+0xf5/0x140 [ 1673.557802][T27085] perf_uprobe_event_init+0xde/0x140 [ 1673.563071][T27085] perf_try_init_event+0x21a/0x400 [ 1673.568195][T27085] perf_event_alloc+0xa60/0x1790 [ 1673.573129][T27085] __se_sys_perf_event_open+0x5db/0x2810 [ 1673.578763][T27085] ? proc_fail_nth_read+0x150/0x150 [ 1673.583960][T27085] __x64_sys_perf_event_open+0x63/0x70 [ 1673.589431][T27085] do_syscall_64+0x44/0xa0 [ 1673.593955][T27085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1673.599869][T27085] RIP: 0033:0x4665f9 [ 1673.603746][T27085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.623357][T27085] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5c010000, 0x0, 0x0, 0x0) 04:46:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x50d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1673.631750][T27085] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1673.639748][T27085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1673.647696][T27085] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.655672][T27085] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1673.663701][T27085] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 0 (fault-call:2 fault-nth:32): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1673.703327][T27091] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5d000000, 0x0, 0x0, 0x0) [ 1673.759943][T27095] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1673.782908][T27112] FAULT_INJECTION: forcing a failure. [ 1673.782908][T27112] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.795612][T27112] CPU: 1 PID: 27112 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1673.804022][T27112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.814070][T27112] Call Trace: [ 1673.817350][T27112] dump_stack_lvl+0xd6/0x122 [ 1673.821944][T27112] dump_stack+0x11/0x1b [ 1673.826184][T27112] should_fail+0x23c/0x250 [ 1673.830631][T27112] __should_failslab+0x81/0x90 [ 1673.835404][T27112] ? register_for_each_vma+0x372/0x890 [ 1673.840843][T27112] should_failslab+0x5/0x20 [ 1673.845329][T27112] kmem_cache_alloc_trace+0x52/0x320 [ 1673.850592][T27112] ? register_for_each_vma+0x372/0x890 [ 1673.856032][T27112] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1673.862029][T27112] register_for_each_vma+0x372/0x890 [ 1673.867302][T27112] __uprobe_register+0x404/0x8b0 [ 1673.872275][T27112] uprobe_register_refctr+0x29/0x40 [ 1673.877467][T27112] probe_event_enable+0x2be/0x7d0 [ 1673.882515][T27112] ? __uprobe_trace_func+0x440/0x440 [ 1673.887834][T27112] trace_uprobe_register+0x88/0x410 [ 1673.893012][T27112] perf_trace_event_init+0x34e/0x790 [ 1673.898359][T27112] perf_uprobe_init+0xf5/0x140 [ 1673.903163][T27112] perf_uprobe_event_init+0xde/0x140 [ 1673.908432][T27112] perf_try_init_event+0x21a/0x400 [ 1673.913526][T27112] perf_event_alloc+0xa60/0x1790 [ 1673.918526][T27112] __se_sys_perf_event_open+0x5db/0x2810 [ 1673.924156][T27112] ? proc_fail_nth_read+0x150/0x150 [ 1673.929334][T27112] __x64_sys_perf_event_open+0x63/0x70 [ 1673.934774][T27112] do_syscall_64+0x44/0xa0 [ 1673.939220][T27112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1673.945114][T27112] RIP: 0033:0x4665f9 [ 1673.948995][T27112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.968580][T27112] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1673.976974][T27112] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1673.984923][T27112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1673.992873][T27112] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.000903][T27112] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5d010000, 0x0, 0x0, 0x0) 04:46:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x50e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1674.008858][T27112] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:12 executing program 0 (fault-call:2 fault-nth:33): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5e000000, 0x0, 0x0, 0x0) [ 1674.064928][T27119] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x510}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1674.114887][T27130] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1674.170700][T27133] FAULT_INJECTION: forcing a failure. [ 1674.170700][T27133] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.183339][T27133] CPU: 0 PID: 27133 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1674.191797][T27133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.201869][T27133] Call Trace: [ 1674.205133][T27133] dump_stack_lvl+0xd6/0x122 [ 1674.209784][T27133] dump_stack+0x11/0x1b [ 1674.213921][T27133] should_fail+0x23c/0x250 [ 1674.218319][T27133] __should_failslab+0x81/0x90 [ 1674.223142][T27133] ? register_for_each_vma+0x372/0x890 [ 1674.228592][T27133] should_failslab+0x5/0x20 [ 1674.233090][T27133] kmem_cache_alloc_trace+0x52/0x320 [ 1674.238363][T27133] ? register_for_each_vma+0x372/0x890 [ 1674.243805][T27133] ? vma_interval_tree_iter_next+0x263/0x280 [ 1674.249864][T27133] register_for_each_vma+0x372/0x890 [ 1674.255216][T27133] __uprobe_register+0x404/0x8b0 [ 1674.261386][T27133] uprobe_register_refctr+0x29/0x40 [ 1674.266650][T27133] probe_event_enable+0x2be/0x7d0 [ 1674.271673][T27133] ? __uprobe_trace_func+0x440/0x440 [ 1674.276989][T27133] trace_uprobe_register+0x88/0x410 [ 1674.282172][T27133] perf_trace_event_init+0x34e/0x790 [ 1674.287574][T27133] perf_uprobe_init+0xf5/0x140 [ 1674.292366][T27133] perf_uprobe_event_init+0xde/0x140 [ 1674.297680][T27133] perf_try_init_event+0x21a/0x400 [ 1674.302781][T27133] perf_event_alloc+0xa60/0x1790 [ 1674.307774][T27133] __se_sys_perf_event_open+0x5db/0x2810 [ 1674.313443][T27133] ? proc_fail_nth_read+0x150/0x150 [ 1674.318645][T27133] __x64_sys_perf_event_open+0x63/0x70 [ 1674.324326][T27133] do_syscall_64+0x44/0xa0 [ 1674.328801][T27133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1674.334680][T27133] RIP: 0033:0x4665f9 [ 1674.338607][T27133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.358250][T27133] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5e010000, 0x0, 0x0, 0x0) [ 1674.366650][T27133] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1674.374601][T27133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1674.382552][T27133] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.390517][T27133] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1674.398487][T27133] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x511}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5f000000, 0x0, 0x0, 0x0) 04:46:13 executing program 0 (fault-call:2 fault-nth:34): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1674.419186][T27139] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1674.459727][T27151] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1674.530460][T27164] FAULT_INJECTION: forcing a failure. [ 1674.530460][T27164] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.543082][T27164] CPU: 0 PID: 27164 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1674.551507][T27164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.561826][T27164] Call Trace: [ 1674.565134][T27164] dump_stack_lvl+0xd6/0x122 [ 1674.569706][T27164] dump_stack+0x11/0x1b [ 1674.573837][T27164] should_fail+0x23c/0x250 [ 1674.578232][T27164] __should_failslab+0x81/0x90 [ 1674.582988][T27164] ? register_for_each_vma+0x372/0x890 [ 1674.588441][T27164] should_failslab+0x5/0x20 [ 1674.592940][T27164] kmem_cache_alloc_trace+0x52/0x320 [ 1674.598319][T27164] ? register_for_each_vma+0x372/0x890 [ 1674.603773][T27164] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1674.609833][T27164] register_for_each_vma+0x372/0x890 [ 1674.615110][T27164] __uprobe_register+0x404/0x8b0 [ 1674.620096][T27164] uprobe_register_refctr+0x29/0x40 [ 1674.625289][T27164] probe_event_enable+0x2be/0x7d0 [ 1674.630312][T27164] ? __uprobe_trace_func+0x440/0x440 [ 1674.635580][T27164] trace_uprobe_register+0x88/0x410 [ 1674.640752][T27164] perf_trace_event_init+0x34e/0x790 [ 1674.646017][T27164] perf_uprobe_init+0xf5/0x140 [ 1674.650760][T27164] perf_uprobe_event_init+0xde/0x140 [ 1674.656106][T27164] perf_try_init_event+0x21a/0x400 [ 1674.661200][T27164] perf_event_alloc+0xa60/0x1790 [ 1674.666117][T27164] __se_sys_perf_event_open+0x5db/0x2810 [ 1674.671836][T27164] ? proc_fail_nth_read+0x150/0x150 [ 1674.677037][T27164] __x64_sys_perf_event_open+0x63/0x70 [ 1674.682581][T27164] do_syscall_64+0x44/0xa0 [ 1674.687058][T27164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1674.693122][T27164] RIP: 0033:0x4665f9 [ 1674.696995][T27164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.716592][T27164] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x5f010000, 0x0, 0x0, 0x0) [ 1674.725062][T27164] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1674.733016][T27164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1674.741045][T27164] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.748990][T27164] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1674.756965][T27164] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x60000000, 0x0, 0x0, 0x0) 04:46:13 executing program 0 (fault-call:2 fault-nth:35): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1674.776332][T27165] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1674.832933][T27172] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1674.852148][T27178] FAULT_INJECTION: forcing a failure. [ 1674.852148][T27178] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.864765][T27178] CPU: 0 PID: 27178 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1674.873172][T27178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.883206][T27178] Call Trace: [ 1674.886468][T27178] dump_stack_lvl+0xd6/0x122 [ 1674.891066][T27178] dump_stack+0x11/0x1b [ 1674.895222][T27178] should_fail+0x23c/0x250 [ 1674.899621][T27178] __should_failslab+0x81/0x90 [ 1674.904409][T27178] ? register_for_each_vma+0x372/0x890 [ 1674.909908][T27178] should_failslab+0x5/0x20 [ 1674.914394][T27178] kmem_cache_alloc_trace+0x52/0x320 [ 1674.919684][T27178] ? register_for_each_vma+0x372/0x890 [ 1674.925118][T27178] ? vma_interval_tree_iter_next+0x263/0x280 [ 1674.931152][T27178] register_for_each_vma+0x372/0x890 [ 1674.936416][T27178] __uprobe_register+0x404/0x8b0 [ 1674.941334][T27178] uprobe_register_refctr+0x29/0x40 [ 1674.946555][T27178] probe_event_enable+0x2be/0x7d0 [ 1674.951559][T27178] ? __uprobe_trace_func+0x440/0x440 [ 1674.956820][T27178] trace_uprobe_register+0x88/0x410 [ 1674.962054][T27178] perf_trace_event_init+0x34e/0x790 [ 1674.967360][T27178] perf_uprobe_init+0xf5/0x140 [ 1674.972156][T27178] perf_uprobe_event_init+0xde/0x140 [ 1674.977429][T27178] perf_try_init_event+0x21a/0x400 [ 1674.982521][T27178] perf_event_alloc+0xa60/0x1790 [ 1674.987466][T27178] __se_sys_perf_event_open+0x5db/0x2810 [ 1674.993076][T27178] ? proc_fail_nth_read+0x150/0x150 [ 1674.998299][T27178] __x64_sys_perf_event_open+0x63/0x70 [ 1675.003736][T27178] do_syscall_64+0x44/0xa0 [ 1675.008149][T27178] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1675.014042][T27178] RIP: 0033:0x4665f9 [ 1675.017913][T27178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.037521][T27178] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1675.045963][T27178] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1675.053918][T27178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1675.061868][T27178] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.069812][T27178] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x60010000, 0x0, 0x0, 0x0) 04:46:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x400001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1675.077758][T27178] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x512}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 0 (fault-call:2 fault-nth:36): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:13 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x61000000, 0x0, 0x0, 0x0) 04:46:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1675.165333][T27193] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1675.184083][T27200] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1675.202523][T27197] FAULT_INJECTION: forcing a failure. [ 1675.202523][T27197] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.215165][T27197] CPU: 1 PID: 27197 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1675.223574][T27197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.233621][T27197] Call Trace: [ 1675.236892][T27197] dump_stack_lvl+0xd6/0x122 [ 1675.241484][T27197] dump_stack+0x11/0x1b [ 1675.245630][T27197] should_fail+0x23c/0x250 [ 1675.250036][T27197] __should_failslab+0x81/0x90 [ 1675.254847][T27197] ? register_for_each_vma+0x372/0x890 [ 1675.260285][T27197] should_failslab+0x5/0x20 [ 1675.264771][T27197] kmem_cache_alloc_trace+0x52/0x320 [ 1675.270099][T27197] ? register_for_each_vma+0x372/0x890 [ 1675.275534][T27197] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1675.281582][T27197] register_for_each_vma+0x372/0x890 [ 1675.286843][T27197] __uprobe_register+0x404/0x8b0 [ 1675.291769][T27197] uprobe_register_refctr+0x29/0x40 [ 1675.296944][T27197] probe_event_enable+0x2be/0x7d0 [ 1675.301997][T27197] ? __uprobe_trace_func+0x440/0x440 [ 1675.307265][T27197] trace_uprobe_register+0x88/0x410 [ 1675.312455][T27197] perf_trace_event_init+0x34e/0x790 [ 1675.317770][T27197] perf_uprobe_init+0xf5/0x140 [ 1675.322519][T27197] perf_uprobe_event_init+0xde/0x140 [ 1675.327788][T27197] perf_try_init_event+0x21a/0x400 [ 1675.332900][T27197] perf_event_alloc+0xa60/0x1790 [ 1675.337862][T27197] __se_sys_perf_event_open+0x5db/0x2810 [ 1675.343482][T27197] ? proc_fail_nth_read+0x150/0x150 [ 1675.348746][T27197] __x64_sys_perf_event_open+0x63/0x70 [ 1675.354187][T27197] do_syscall_64+0x44/0xa0 [ 1675.358636][T27197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1675.364588][T27197] RIP: 0033:0x4665f9 [ 1675.368545][T27197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.388145][T27197] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1675.396540][T27197] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1675.404568][T27197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x61010000, 0x0, 0x0, 0x0) 04:46:14 executing program 0 (fault-call:2 fault-nth:37): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1675.412589][T27197] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.420538][T27197] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1675.428488][T27197] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x62000000, 0x0, 0x0, 0x0) 04:46:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x527}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1675.483430][T27210] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1675.518604][T27213] FAULT_INJECTION: forcing a failure. [ 1675.518604][T27213] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.531243][T27213] CPU: 0 PID: 27213 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1675.539678][T27213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.549753][T27213] Call Trace: [ 1675.553027][T27213] dump_stack_lvl+0xd6/0x122 [ 1675.557629][T27213] dump_stack+0x11/0x1b [ 1675.561763][T27213] should_fail+0x23c/0x250 [ 1675.566175][T27213] __should_failslab+0x81/0x90 [ 1675.570920][T27213] ? register_for_each_vma+0x372/0x890 [ 1675.576359][T27213] should_failslab+0x5/0x20 [ 1675.580935][T27213] kmem_cache_alloc_trace+0x52/0x320 [ 1675.586367][T27213] ? register_for_each_vma+0x372/0x890 [ 1675.591833][T27213] ? vma_interval_tree_iter_next+0x263/0x280 [ 1675.597799][T27213] register_for_each_vma+0x372/0x890 [ 1675.603071][T27213] __uprobe_register+0x404/0x8b0 [ 1675.608097][T27213] uprobe_register_refctr+0x29/0x40 [ 1675.613359][T27213] probe_event_enable+0x2be/0x7d0 [ 1675.618361][T27213] ? __uprobe_trace_func+0x440/0x440 [ 1675.623670][T27213] trace_uprobe_register+0x88/0x410 [ 1675.628860][T27213] perf_trace_event_init+0x34e/0x790 [ 1675.634142][T27213] perf_uprobe_init+0xf5/0x140 [ 1675.638951][T27213] perf_uprobe_event_init+0xde/0x140 [ 1675.644215][T27213] perf_try_init_event+0x21a/0x400 [ 1675.649385][T27213] perf_event_alloc+0xa60/0x1790 [ 1675.654381][T27213] __se_sys_perf_event_open+0x5db/0x2810 [ 1675.659991][T27213] ? proc_fail_nth_read+0x150/0x150 [ 1675.665266][T27213] __x64_sys_perf_event_open+0x63/0x70 [ 1675.670707][T27213] do_syscall_64+0x44/0xa0 [ 1675.675119][T27213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1675.681009][T27213] RIP: 0033:0x4665f9 [ 1675.684890][T27213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.704474][T27213] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1675.712864][T27213] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1675.720812][T27213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x62010000, 0x0, 0x0, 0x0) [ 1675.728813][T27213] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.736787][T27213] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1675.744738][T27213] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1675.767888][T27214] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1004000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 0 (fault-call:2 fault-nth:38): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x63000000, 0x0, 0x0, 0x0) 04:46:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x548}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1675.857496][T27236] FAULT_INJECTION: forcing a failure. [ 1675.857496][T27236] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.870158][T27236] CPU: 0 PID: 27236 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1675.878576][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.888624][T27236] Call Trace: [ 1675.891897][T27236] dump_stack_lvl+0xd6/0x122 [ 1675.896483][T27236] dump_stack+0x11/0x1b [ 1675.900678][T27236] should_fail+0x23c/0x250 [ 1675.905072][T27236] __should_failslab+0x81/0x90 [ 1675.909824][T27236] ? register_for_each_vma+0x372/0x890 [ 1675.915278][T27236] should_failslab+0x5/0x20 [ 1675.919765][T27236] kmem_cache_alloc_trace+0x52/0x320 [ 1675.925029][T27236] ? register_for_each_vma+0x372/0x890 [ 1675.930474][T27236] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1675.936440][T27236] register_for_each_vma+0x372/0x890 [ 1675.941702][T27236] __uprobe_register+0x404/0x8b0 [ 1675.946679][T27236] uprobe_register_refctr+0x29/0x40 [ 1675.951928][T27236] probe_event_enable+0x2be/0x7d0 [ 1675.956929][T27236] ? __uprobe_trace_func+0x440/0x440 [ 1675.962207][T27236] trace_uprobe_register+0x88/0x410 [ 1675.967431][T27236] perf_trace_event_init+0x34e/0x790 [ 1675.972763][T27236] perf_uprobe_init+0xf5/0x140 [ 1675.977522][T27236] perf_uprobe_event_init+0xde/0x140 [ 1675.982811][T27236] perf_try_init_event+0x21a/0x400 [ 1675.987915][T27236] perf_event_alloc+0xa60/0x1790 [ 1675.992836][T27236] __se_sys_perf_event_open+0x5db/0x2810 [ 1675.998458][T27236] ? proc_fail_nth_read+0x150/0x150 [ 1676.003660][T27236] __x64_sys_perf_event_open+0x63/0x70 [ 1676.009145][T27236] do_syscall_64+0x44/0xa0 [ 1676.013552][T27236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1676.019449][T27236] RIP: 0033:0x4665f9 [ 1676.023329][T27236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.042916][T27236] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x63010000, 0x0, 0x0, 0x0) [ 1676.051308][T27236] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1676.059257][T27236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1676.067217][T27236] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.075230][T27236] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1676.083229][T27236] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x64000000, 0x0, 0x0, 0x0) [ 1676.109023][T27241] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x54c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 0 (fault-call:2 fault-nth:39): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:14 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x64010000, 0x0, 0x0, 0x0) [ 1676.208193][T27263] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1676.245921][T27269] FAULT_INJECTION: forcing a failure. [ 1676.245921][T27269] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.258547][T27269] CPU: 1 PID: 27269 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1676.266982][T27269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.277101][T27269] Call Trace: [ 1676.280360][T27269] dump_stack_lvl+0xd6/0x122 [ 1676.284941][T27269] dump_stack+0x11/0x1b [ 1676.289075][T27269] should_fail+0x23c/0x250 [ 1676.293469][T27269] __should_failslab+0x81/0x90 [ 1676.298210][T27269] ? register_for_each_vma+0x372/0x890 [ 1676.303648][T27269] should_failslab+0x5/0x20 [ 1676.308127][T27269] kmem_cache_alloc_trace+0x52/0x320 [ 1676.313434][T27269] ? register_for_each_vma+0x372/0x890 [ 1676.318887][T27269] ? vma_interval_tree_iter_next+0x263/0x280 [ 1676.324862][T27269] register_for_each_vma+0x372/0x890 [ 1676.330130][T27269] __uprobe_register+0x404/0x8b0 [ 1676.335055][T27269] uprobe_register_refctr+0x29/0x40 [ 1676.340315][T27269] probe_event_enable+0x2be/0x7d0 [ 1676.345327][T27269] ? __uprobe_trace_func+0x440/0x440 [ 1676.350586][T27269] trace_uprobe_register+0x88/0x410 [ 1676.355759][T27269] perf_trace_event_init+0x34e/0x790 [ 1676.361031][T27269] perf_uprobe_init+0xf5/0x140 [ 1676.365802][T27269] perf_uprobe_event_init+0xde/0x140 [ 1676.371087][T27269] perf_try_init_event+0x21a/0x400 [ 1676.376179][T27269] perf_event_alloc+0xa60/0x1790 [ 1676.381116][T27269] __se_sys_perf_event_open+0x5db/0x2810 [ 1676.386732][T27269] ? proc_fail_nth_read+0x150/0x150 [ 1676.391969][T27269] __x64_sys_perf_event_open+0x63/0x70 [ 1676.397422][T27269] do_syscall_64+0x44/0xa0 [ 1676.401837][T27269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1676.407709][T27269] RIP: 0033:0x4665f9 [ 1676.411578][T27269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.431205][T27269] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1676.439593][T27269] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1676.447545][T27269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x568}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 0 (fault-call:2 fault-nth:40): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1676.455506][T27269] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.463497][T27269] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1676.471479][T27269] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1676.494748][T27271] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:15 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x65000000, 0x0, 0x0, 0x0) 04:46:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1676.560142][T27286] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1676.594983][T27288] FAULT_INJECTION: forcing a failure. [ 1676.594983][T27288] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.607611][T27288] CPU: 0 PID: 27288 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1676.616052][T27288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.626114][T27288] Call Trace: [ 1676.629380][T27288] dump_stack_lvl+0xd6/0x122 [ 1676.633952][T27288] dump_stack+0x11/0x1b [ 1676.638119][T27288] should_fail+0x23c/0x250 [ 1676.642552][T27288] __should_failslab+0x81/0x90 [ 1676.647296][T27288] ? register_for_each_vma+0x372/0x890 [ 1676.652748][T27288] should_failslab+0x5/0x20 [ 1676.657252][T27288] kmem_cache_alloc_trace+0x52/0x320 [ 1676.662524][T27288] ? register_for_each_vma+0x372/0x890 [ 1676.667982][T27288] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1676.674014][T27288] register_for_each_vma+0x372/0x890 [ 1676.679368][T27288] __uprobe_register+0x404/0x8b0 [ 1676.684343][T27288] uprobe_register_refctr+0x29/0x40 [ 1676.689580][T27288] probe_event_enable+0x2be/0x7d0 [ 1676.694612][T27288] ? __uprobe_trace_func+0x440/0x440 [ 1676.699880][T27288] trace_uprobe_register+0x88/0x410 [ 1676.705096][T27288] perf_trace_event_init+0x34e/0x790 [ 1676.710382][T27288] perf_uprobe_init+0xf5/0x140 [ 1676.715378][T27288] perf_uprobe_event_init+0xde/0x140 [ 1676.720650][T27288] perf_try_init_event+0x21a/0x400 [ 1676.725758][T27288] perf_event_alloc+0xa60/0x1790 [ 1676.730681][T27288] __se_sys_perf_event_open+0x5db/0x2810 [ 1676.736331][T27288] ? proc_fail_nth_read+0x150/0x150 [ 1676.741548][T27288] __x64_sys_perf_event_open+0x63/0x70 [ 1676.746990][T27288] do_syscall_64+0x44/0xa0 [ 1676.751389][T27288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1676.757323][T27288] RIP: 0033:0x4665f9 [ 1676.761208][T27288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.780811][T27288] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1676.789205][T27288] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1676.797158][T27288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:15 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x65010000, 0x0, 0x0, 0x0) 04:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x56c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1676.805106][T27288] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.813068][T27288] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1676.821018][T27288] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1676.870166][T27298] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x66000000, 0x0, 0x0, 0x0) 04:46:15 executing program 0 (fault-call:2 fault-nth:41): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1676.934614][T27311] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1676.948410][T27315] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1676.989255][T27322] FAULT_INJECTION: forcing a failure. [ 1676.989255][T27322] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.001905][T27322] CPU: 1 PID: 27322 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1677.010311][T27322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.020359][T27322] Call Trace: [ 1677.023655][T27322] dump_stack_lvl+0xd6/0x122 [ 1677.028235][T27322] dump_stack+0x11/0x1b [ 1677.032377][T27322] should_fail+0x23c/0x250 [ 1677.036833][T27322] __should_failslab+0x81/0x90 [ 1677.041579][T27322] ? register_for_each_vma+0x372/0x890 [ 1677.047052][T27322] should_failslab+0x5/0x20 [ 1677.051533][T27322] kmem_cache_alloc_trace+0x52/0x320 [ 1677.056884][T27322] ? register_for_each_vma+0x372/0x890 [ 1677.062335][T27322] ? vma_interval_tree_iter_next+0x263/0x280 [ 1677.068357][T27322] register_for_each_vma+0x372/0x890 [ 1677.073696][T27322] __uprobe_register+0x404/0x8b0 [ 1677.078625][T27322] uprobe_register_refctr+0x29/0x40 [ 1677.083814][T27322] probe_event_enable+0x2be/0x7d0 [ 1677.088819][T27322] ? __uprobe_trace_func+0x440/0x440 [ 1677.094183][T27322] trace_uprobe_register+0x88/0x410 [ 1677.099372][T27322] perf_trace_event_init+0x34e/0x790 [ 1677.104706][T27322] perf_uprobe_init+0xf5/0x140 [ 1677.109490][T27322] perf_uprobe_event_init+0xde/0x140 [ 1677.114755][T27322] perf_try_init_event+0x21a/0x400 [ 1677.119881][T27322] perf_event_alloc+0xa60/0x1790 [ 1677.124803][T27322] __se_sys_perf_event_open+0x5db/0x2810 [ 1677.130425][T27322] ? proc_fail_nth_read+0x150/0x150 [ 1677.135628][T27322] __x64_sys_perf_event_open+0x63/0x70 [ 1677.141177][T27322] do_syscall_64+0x44/0xa0 [ 1677.145587][T27322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1677.151531][T27322] RIP: 0033:0x4665f9 [ 1677.155451][T27322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.175118][T27322] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:15 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x66010000, 0x0, 0x0, 0x0) 04:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x574}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1677.183570][T27322] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1677.191517][T27322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1677.199468][T27322] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.207467][T27322] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1677.215417][T27322] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1677.225504][T27324] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:16 executing program 0 (fault-call:2 fault-nth:42): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x15180, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1677.259809][T27325] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x67000000, 0x0, 0x0, 0x0) 04:46:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x57a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1677.329447][T27339] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1677.365346][T27343] FAULT_INJECTION: forcing a failure. [ 1677.365346][T27343] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.377999][T27343] CPU: 1 PID: 27343 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1677.386414][T27343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.396466][T27343] Call Trace: [ 1677.399739][T27343] dump_stack_lvl+0xd6/0x122 [ 1677.404380][T27343] dump_stack+0x11/0x1b [ 1677.408534][T27343] should_fail+0x23c/0x250 [ 1677.412933][T27343] __should_failslab+0x81/0x90 [ 1677.417690][T27343] ? register_for_each_vma+0x372/0x890 [ 1677.423161][T27343] should_failslab+0x5/0x20 [ 1677.427652][T27343] kmem_cache_alloc_trace+0x52/0x320 [ 1677.432938][T27343] ? register_for_each_vma+0x372/0x890 [ 1677.439369][T27343] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1677.445471][T27343] register_for_each_vma+0x372/0x890 [ 1677.450741][T27343] __uprobe_register+0x404/0x8b0 [ 1677.455745][T27343] uprobe_register_refctr+0x29/0x40 [ 1677.460933][T27343] probe_event_enable+0x2be/0x7d0 [ 1677.465936][T27343] ? __uprobe_trace_func+0x440/0x440 [ 1677.471283][T27343] trace_uprobe_register+0x88/0x410 [ 1677.476470][T27343] perf_trace_event_init+0x34e/0x790 [ 1677.481863][T27343] perf_uprobe_init+0xf5/0x140 [ 1677.486605][T27343] perf_uprobe_event_init+0xde/0x140 [ 1677.491892][T27343] perf_try_init_event+0x21a/0x400 [ 1677.497002][T27343] perf_event_alloc+0xa60/0x1790 [ 1677.502002][T27343] __se_sys_perf_event_open+0x5db/0x2810 [ 1677.507635][T27343] ? proc_fail_nth_read+0x150/0x150 [ 1677.512814][T27343] __x64_sys_perf_event_open+0x63/0x70 [ 1677.518260][T27343] do_syscall_64+0x44/0xa0 [ 1677.522656][T27343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1677.528618][T27343] RIP: 0033:0x4665f9 [ 1677.532490][T27343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.552088][T27343] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1677.560480][T27343] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1677.568428][T27343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x67010000, 0x0, 0x0, 0x0) 04:46:16 executing program 0 (fault-call:2 fault-nth:43): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1677.576454][T27343] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.584452][T27343] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1677.592415][T27343] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1677.612355][T27349] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x68000000, 0x0, 0x0, 0x0) [ 1677.683599][T27364] FAULT_INJECTION: forcing a failure. [ 1677.683599][T27364] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.696233][T27364] CPU: 0 PID: 27364 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1677.704644][T27364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.714725][T27364] Call Trace: [ 1677.718005][T27364] dump_stack_lvl+0xd6/0x122 [ 1677.722662][T27364] dump_stack+0x11/0x1b [ 1677.726825][T27364] should_fail+0x23c/0x250 [ 1677.731224][T27364] __should_failslab+0x81/0x90 [ 1677.735987][T27364] ? register_for_each_vma+0x372/0x890 [ 1677.741488][T27364] should_failslab+0x5/0x20 [ 1677.746037][T27364] kmem_cache_alloc_trace+0x52/0x320 [ 1677.751313][T27364] ? register_for_each_vma+0x372/0x890 [ 1677.756767][T27364] ? vma_interval_tree_iter_next+0x263/0x280 [ 1677.762741][T27364] register_for_each_vma+0x372/0x890 [ 1677.768017][T27364] __uprobe_register+0x404/0x8b0 [ 1677.772947][T27364] uprobe_register_refctr+0x29/0x40 [ 1677.778124][T27364] probe_event_enable+0x2be/0x7d0 [ 1677.783126][T27364] ? __uprobe_trace_func+0x440/0x440 [ 1677.788385][T27364] trace_uprobe_register+0x88/0x410 [ 1677.793561][T27364] perf_trace_event_init+0x34e/0x790 [ 1677.798833][T27364] perf_uprobe_init+0xf5/0x140 [ 1677.803598][T27364] perf_uprobe_event_init+0xde/0x140 [ 1677.808870][T27364] perf_try_init_event+0x21a/0x400 [ 1677.813978][T27364] perf_event_alloc+0xa60/0x1790 [ 1677.818903][T27364] __se_sys_perf_event_open+0x5db/0x2810 [ 1677.824556][T27364] ? proc_fail_nth_read+0x150/0x150 [ 1677.829738][T27364] __x64_sys_perf_event_open+0x63/0x70 [ 1677.835218][T27364] do_syscall_64+0x44/0xa0 [ 1677.839634][T27364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1677.845509][T27364] RIP: 0033:0x4665f9 [ 1677.849389][T27364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.868985][T27364] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x68010000, 0x0, 0x0, 0x0) [ 1677.877468][T27364] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1677.885420][T27364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1677.893373][T27364] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.901337][T27364] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1677.909289][T27364] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 0 (fault-call:2 fault-nth:44): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1677.937532][T27366] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x69000000, 0x0, 0x0, 0x0) [ 1677.994692][T27380] ref_ctr_offset mismatch. inode: 0x361d offset: 0x700 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 [ 1678.017213][T27383] FAULT_INJECTION: forcing a failure. [ 1678.017213][T27383] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.029843][T27383] CPU: 1 PID: 27383 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1678.038330][T27383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.048402][T27383] Call Trace: [ 1678.051669][T27383] dump_stack_lvl+0xd6/0x122 [ 1678.056241][T27383] dump_stack+0x11/0x1b [ 1678.060433][T27383] should_fail+0x23c/0x250 [ 1678.064850][T27383] __should_failslab+0x81/0x90 [ 1678.069667][T27383] ? register_for_each_vma+0x372/0x890 [ 1678.075104][T27383] should_failslab+0x5/0x20 [ 1678.079601][T27383] kmem_cache_alloc_trace+0x52/0x320 [ 1678.084864][T27383] ? register_for_each_vma+0x372/0x890 [ 1678.090319][T27383] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1678.096301][T27383] register_for_each_vma+0x372/0x890 [ 1678.101584][T27383] __uprobe_register+0x404/0x8b0 [ 1678.106511][T27383] uprobe_register_refctr+0x29/0x40 [ 1678.111689][T27383] probe_event_enable+0x2be/0x7d0 [ 1678.116707][T27383] ? __uprobe_trace_func+0x440/0x440 [ 1678.122038][T27383] trace_uprobe_register+0x88/0x410 [ 1678.127219][T27383] perf_trace_event_init+0x34e/0x790 [ 1678.132485][T27383] perf_uprobe_init+0xf5/0x140 [ 1678.137299][T27383] perf_uprobe_event_init+0xde/0x140 [ 1678.142572][T27383] perf_try_init_event+0x21a/0x400 [ 1678.147798][T27383] perf_event_alloc+0xa60/0x1790 [ 1678.152723][T27383] __se_sys_perf_event_open+0x5db/0x2810 [ 1678.158351][T27383] ? proc_fail_nth_read+0x150/0x150 [ 1678.163562][T27383] __x64_sys_perf_event_open+0x63/0x70 [ 1678.169015][T27383] do_syscall_64+0x44/0xa0 [ 1678.173428][T27383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1678.179386][T27383] RIP: 0033:0x4665f9 [ 1678.183265][T27383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1678.202886][T27383] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1678.211300][T27383] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1678.219251][T27383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1678.227201][T27383] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1678.235180][T27383] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:16 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x69010000, 0x0, 0x0, 0x0) 04:46:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 0 (fault-call:2 fault-nth:45): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.243127][T27383] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1678.262183][T27381] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1678.281613][T27392] ref_ctr_offset mismatch. inode: 0x361d offset: 0x700 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 04:46:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6a000000, 0x0, 0x0, 0x0) 04:46:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.347590][T27405] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1678.372516][T27406] FAULT_INJECTION: forcing a failure. [ 1678.372516][T27406] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.385264][T27406] CPU: 0 PID: 27406 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1678.393673][T27406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.403802][T27406] Call Trace: [ 1678.407074][T27406] dump_stack_lvl+0xd6/0x122 [ 1678.411668][T27406] dump_stack+0x11/0x1b [ 1678.415823][T27406] should_fail+0x23c/0x250 [ 1678.420217][T27406] __should_failslab+0x81/0x90 [ 1678.424958][T27406] ? register_for_each_vma+0x372/0x890 [ 1678.430406][T27406] should_failslab+0x5/0x20 [ 1678.434908][T27406] kmem_cache_alloc_trace+0x52/0x320 [ 1678.440171][T27406] ? register_for_each_vma+0x372/0x890 [ 1678.445620][T27406] ? vma_interval_tree_iter_next+0x263/0x280 [ 1678.451674][T27406] register_for_each_vma+0x372/0x890 [ 1678.456936][T27406] __uprobe_register+0x404/0x8b0 [ 1678.461849][T27406] uprobe_register_refctr+0x29/0x40 [ 1678.467154][T27406] probe_event_enable+0x2be/0x7d0 [ 1678.472244][T27406] ? __uprobe_trace_func+0x440/0x440 [ 1678.477518][T27406] trace_uprobe_register+0x88/0x410 [ 1678.482754][T27406] perf_trace_event_init+0x34e/0x790 [ 1678.488109][T27406] perf_uprobe_init+0xf5/0x140 [ 1678.492856][T27406] perf_uprobe_event_init+0xde/0x140 [ 1678.498171][T27406] perf_try_init_event+0x21a/0x400 [ 1678.503278][T27406] perf_event_alloc+0xa60/0x1790 [ 1678.508196][T27406] __se_sys_perf_event_open+0x5db/0x2810 [ 1678.513826][T27406] ? proc_fail_nth_read+0x150/0x150 [ 1678.519013][T27406] __x64_sys_perf_event_open+0x63/0x70 [ 1678.524471][T27406] do_syscall_64+0x44/0xa0 [ 1678.528885][T27406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1678.534844][T27406] RIP: 0033:0x4665f9 [ 1678.538717][T27406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1678.558388][T27406] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1678.566780][T27406] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1678.574752][T27406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1678.584071][T27406] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:17 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6a010000, 0x0, 0x0, 0x0) 04:46:17 executing program 0 (fault-call:2 fault-nth:46): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6b000000, 0x0, 0x0, 0x0) 04:46:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.592029][T27406] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1678.600012][T27406] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1678.628053][T27413] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b3ae8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.690613][T27426] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1678.703893][T27428] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1678.729497][T27423] FAULT_INJECTION: forcing a failure. [ 1678.729497][T27423] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.742135][T27423] CPU: 1 PID: 27423 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1678.750580][T27423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.760628][T27423] Call Trace: [ 1678.763899][T27423] dump_stack_lvl+0xd6/0x122 [ 1678.768499][T27423] dump_stack+0x11/0x1b [ 1678.772675][T27423] should_fail+0x23c/0x250 [ 1678.777068][T27423] __should_failslab+0x81/0x90 [ 1678.781896][T27423] ? register_for_each_vma+0x372/0x890 [ 1678.787335][T27423] should_failslab+0x5/0x20 [ 1678.791888][T27423] kmem_cache_alloc_trace+0x52/0x320 [ 1678.797154][T27423] ? register_for_each_vma+0x372/0x890 [ 1678.802600][T27423] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1678.808559][T27423] register_for_each_vma+0x372/0x890 [ 1678.813932][T27423] __uprobe_register+0x404/0x8b0 [ 1678.818940][T27423] uprobe_register_refctr+0x29/0x40 [ 1678.824121][T27423] probe_event_enable+0x2be/0x7d0 [ 1678.829127][T27423] ? __uprobe_trace_func+0x440/0x440 [ 1678.834530][T27423] trace_uprobe_register+0x88/0x410 [ 1678.839709][T27423] perf_trace_event_init+0x34e/0x790 [ 1678.844975][T27423] perf_uprobe_init+0xf5/0x140 [ 1678.849729][T27423] perf_uprobe_event_init+0xde/0x140 [ 1678.855011][T27423] perf_try_init_event+0x21a/0x400 [ 1678.860141][T27423] perf_event_alloc+0xa60/0x1790 [ 1678.865127][T27423] __se_sys_perf_event_open+0x5db/0x2810 [ 1678.870737][T27423] ? proc_fail_nth_read+0x150/0x150 [ 1678.875934][T27423] __x64_sys_perf_event_open+0x63/0x70 [ 1678.881388][T27423] do_syscall_64+0x44/0xa0 [ 1678.885805][T27423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1678.891692][T27423] RIP: 0033:0x4665f9 [ 1678.895564][T27423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1678.915173][T27423] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1678.923566][T27423] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1678.931518][T27423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:17 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6b010000, 0x0, 0x0, 0x0) [ 1678.939486][T27423] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1678.947433][T27423] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1678.955446][T27423] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:17 executing program 0 (fault-call:2 fault-nth:47): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.985319][T27440] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1679.024228][T27448] FAULT_INJECTION: forcing a failure. 04:46:17 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6c000000, 0x0, 0x0, 0x0) [ 1679.024228][T27448] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.036848][T27448] CPU: 1 PID: 27448 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1679.045243][T27448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.055283][T27448] Call Trace: [ 1679.058539][T27448] dump_stack_lvl+0xd6/0x122 [ 1679.063157][T27448] dump_stack+0x11/0x1b [ 1679.067310][T27448] should_fail+0x23c/0x250 [ 1679.071701][T27448] __should_failslab+0x81/0x90 [ 1679.076546][T27448] ? register_for_each_vma+0x372/0x890 [ 1679.082031][T27448] should_failslab+0x5/0x20 [ 1679.086530][T27448] kmem_cache_alloc_trace+0x52/0x320 [ 1679.091805][T27448] ? register_for_each_vma+0x372/0x890 [ 1679.097248][T27448] ? vma_interval_tree_iter_next+0x263/0x280 [ 1679.103208][T27448] register_for_each_vma+0x372/0x890 [ 1679.108472][T27448] __uprobe_register+0x404/0x8b0 [ 1679.113393][T27448] uprobe_register_refctr+0x29/0x40 [ 1679.118581][T27448] probe_event_enable+0x2be/0x7d0 [ 1679.123589][T27448] ? __uprobe_trace_func+0x440/0x440 [ 1679.128854][T27448] trace_uprobe_register+0x88/0x410 [ 1679.134083][T27448] perf_trace_event_init+0x34e/0x790 [ 1679.139366][T27448] perf_uprobe_init+0xf5/0x140 [ 1679.144117][T27448] perf_uprobe_event_init+0xde/0x140 [ 1679.149504][T27448] perf_try_init_event+0x21a/0x400 [ 1679.154598][T27448] perf_event_alloc+0xa60/0x1790 [ 1679.159540][T27448] __se_sys_perf_event_open+0x5db/0x2810 [ 1679.165221][T27448] ? proc_fail_nth_read+0x150/0x150 [ 1679.170422][T27448] __x64_sys_perf_event_open+0x63/0x70 [ 1679.175903][T27448] do_syscall_64+0x44/0xa0 [ 1679.180324][T27448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1679.186652][T27448] RIP: 0033:0x4665f9 [ 1679.190560][T27448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.210156][T27448] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1679.218555][T27448] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1679.226556][T27448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1679.234541][T27448] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.242588][T27448] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1679.250564][T27448] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1679.274431][T27446] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:18 executing program 0 (fault-call:2 fault-nth:48): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6c010000, 0x0, 0x0, 0x0) [ 1679.356277][T27464] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1679.368445][T27465] FAULT_INJECTION: forcing a failure. [ 1679.368445][T27465] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.381153][T27465] CPU: 1 PID: 27465 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1679.389735][T27465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.399781][T27465] Call Trace: [ 1679.403044][T27465] dump_stack_lvl+0xd6/0x122 [ 1679.407626][T27465] dump_stack+0x11/0x1b [ 1679.411761][T27465] should_fail+0x23c/0x250 [ 1679.416154][T27465] __should_failslab+0x81/0x90 [ 1679.420900][T27465] ? register_for_each_vma+0x372/0x890 [ 1679.426418][T27465] should_failslab+0x5/0x20 [ 1679.430904][T27465] kmem_cache_alloc_trace+0x52/0x320 [ 1679.436173][T27465] ? register_for_each_vma+0x372/0x890 [ 1679.441697][T27465] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1679.447684][T27465] register_for_each_vma+0x372/0x890 [ 1679.453005][T27465] __uprobe_register+0x404/0x8b0 [ 1679.457963][T27465] uprobe_register_refctr+0x29/0x40 [ 1679.463139][T27465] probe_event_enable+0x2be/0x7d0 [ 1679.468156][T27465] ? __uprobe_trace_func+0x440/0x440 [ 1679.473424][T27465] trace_uprobe_register+0x88/0x410 [ 1679.478629][T27465] perf_trace_event_init+0x34e/0x790 [ 1679.484006][T27465] perf_uprobe_init+0xf5/0x140 [ 1679.488770][T27465] perf_uprobe_event_init+0xde/0x140 [ 1679.494106][T27465] perf_try_init_event+0x21a/0x400 [ 1679.499281][T27465] perf_event_alloc+0xa60/0x1790 [ 1679.504208][T27465] __se_sys_perf_event_open+0x5db/0x2810 [ 1679.509827][T27465] ? proc_fail_nth_read+0x150/0x150 [ 1679.515080][T27465] __x64_sys_perf_event_open+0x63/0x70 [ 1679.520585][T27465] do_syscall_64+0x44/0xa0 [ 1679.524983][T27465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1679.530860][T27465] RIP: 0033:0x4665f9 [ 1679.534732][T27465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6d000000, 0x0, 0x0, 0x0) [ 1679.554401][T27465] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1679.562914][T27465] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1679.570867][T27465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1679.578829][T27465] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.586782][T27465] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1679.594737][T27465] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 0 (fault-call:2 fault-nth:49): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6d010000, 0x0, 0x0, 0x0) [ 1679.625482][T27472] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1679.700938][T27487] FAULT_INJECTION: forcing a failure. [ 1679.700938][T27487] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.713644][T27487] CPU: 1 PID: 27487 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1679.722142][T27487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.732191][T27487] Call Trace: [ 1679.735495][T27487] dump_stack_lvl+0xd6/0x122 [ 1679.740110][T27487] dump_stack+0x11/0x1b [ 1679.744244][T27487] should_fail+0x23c/0x250 [ 1679.748715][T27487] __should_failslab+0x81/0x90 [ 1679.753526][T27487] ? register_for_each_vma+0x372/0x890 [ 1679.759025][T27487] should_failslab+0x5/0x20 [ 1679.763566][T27487] kmem_cache_alloc_trace+0x52/0x320 [ 1679.768833][T27487] ? register_for_each_vma+0x372/0x890 [ 1679.774271][T27487] ? vma_interval_tree_iter_next+0x263/0x280 [ 1679.780291][T27487] register_for_each_vma+0x372/0x890 [ 1679.785589][T27487] __uprobe_register+0x404/0x8b0 [ 1679.790665][T27487] uprobe_register_refctr+0x29/0x40 [ 1679.795857][T27487] probe_event_enable+0x2be/0x7d0 [ 1679.800867][T27487] ? __uprobe_trace_func+0x440/0x440 [ 1679.806134][T27487] trace_uprobe_register+0x88/0x410 [ 1679.811311][T27487] perf_trace_event_init+0x34e/0x790 [ 1679.816643][T27487] perf_uprobe_init+0xf5/0x140 [ 1679.821387][T27487] perf_uprobe_event_init+0xde/0x140 [ 1679.826681][T27487] perf_try_init_event+0x21a/0x400 [ 1679.831774][T27487] perf_event_alloc+0xa60/0x1790 [ 1679.836712][T27487] __se_sys_perf_event_open+0x5db/0x2810 [ 1679.842329][T27487] ? proc_fail_nth_read+0x150/0x150 [ 1679.847556][T27487] __x64_sys_perf_event_open+0x63/0x70 [ 1679.853004][T27487] do_syscall_64+0x44/0xa0 [ 1679.857588][T27487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1679.863475][T27487] RIP: 0033:0x4665f9 [ 1679.867345][T27487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.886932][T27487] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6e000000, 0x0, 0x0, 0x0) [ 1679.895340][T27487] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1679.903297][T27487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1679.911254][T27487] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.919213][T27487] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1679.927212][T27487] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6e010000, 0x0, 0x0, 0x0) 04:46:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 0 (fault-call:2 fault-nth:50): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1679.957608][T27489] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:18 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6f000000, 0x0, 0x0, 0x0) [ 1680.036476][T27511] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1680.069999][T27513] FAULT_INJECTION: forcing a failure. [ 1680.069999][T27513] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.082637][T27513] CPU: 1 PID: 27513 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1680.091072][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.101127][T27513] Call Trace: [ 1680.104401][T27513] dump_stack_lvl+0xd6/0x122 [ 1680.108995][T27513] dump_stack+0x11/0x1b [ 1680.113160][T27513] should_fail+0x23c/0x250 [ 1680.117576][T27513] __should_failslab+0x81/0x90 [ 1680.122359][T27513] ? register_for_each_vma+0x372/0x890 [ 1680.127799][T27513] should_failslab+0x5/0x20 [ 1680.132336][T27513] kmem_cache_alloc_trace+0x52/0x320 [ 1680.137607][T27513] ? register_for_each_vma+0x372/0x890 [ 1680.143065][T27513] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1680.149072][T27513] register_for_each_vma+0x372/0x890 [ 1680.154343][T27513] __uprobe_register+0x404/0x8b0 [ 1680.159294][T27513] uprobe_register_refctr+0x29/0x40 [ 1680.164488][T27513] probe_event_enable+0x2be/0x7d0 [ 1680.169503][T27513] ? __uprobe_trace_func+0x440/0x440 [ 1680.174766][T27513] trace_uprobe_register+0x88/0x410 [ 1680.179959][T27513] perf_trace_event_init+0x34e/0x790 [ 1680.185271][T27513] perf_uprobe_init+0xf5/0x140 [ 1680.190017][T27513] perf_uprobe_event_init+0xde/0x140 [ 1680.195359][T27513] perf_try_init_event+0x21a/0x400 [ 1680.200474][T27513] perf_event_alloc+0xa60/0x1790 [ 1680.205390][T27513] __se_sys_perf_event_open+0x5db/0x2810 [ 1680.211017][T27513] ? proc_fail_nth_read+0x150/0x150 [ 1680.216289][T27513] __x64_sys_perf_event_open+0x63/0x70 [ 1680.221742][T27513] do_syscall_64+0x44/0xa0 [ 1680.226191][T27513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1680.232081][T27513] RIP: 0033:0x4665f9 [ 1680.235999][T27513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.255670][T27513] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1680.264095][T27513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1680.272117][T27513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x6f010000, 0x0, 0x0, 0x0) 04:46:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x70000000, 0x0, 0x0, 0x0) [ 1680.280113][T27513] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.288072][T27513] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1680.296027][T27513] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1680.324347][T27521] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:19 executing program 0 (fault-call:2 fault-nth:51): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1680.443010][T27548] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1680.465881][T27550] FAULT_INJECTION: forcing a failure. [ 1680.465881][T27550] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.478603][T27550] CPU: 1 PID: 27550 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1680.487102][T27550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.497149][T27550] Call Trace: [ 1680.500410][T27550] dump_stack_lvl+0xd6/0x122 [ 1680.505045][T27550] dump_stack+0x11/0x1b [ 1680.509183][T27550] should_fail+0x23c/0x250 [ 1680.513611][T27550] __should_failslab+0x81/0x90 [ 1680.518377][T27550] ? register_for_each_vma+0x372/0x890 [ 1680.523814][T27550] should_failslab+0x5/0x20 [ 1680.528315][T27550] kmem_cache_alloc_trace+0x52/0x320 [ 1680.533611][T27550] ? register_for_each_vma+0x372/0x890 [ 1680.539047][T27550] ? vma_interval_tree_iter_next+0x263/0x280 [ 1680.545089][T27550] register_for_each_vma+0x372/0x890 [ 1680.550371][T27550] __uprobe_register+0x404/0x8b0 [ 1680.555287][T27550] uprobe_register_refctr+0x29/0x40 [ 1680.560533][T27550] probe_event_enable+0x2be/0x7d0 [ 1680.565534][T27550] ? __uprobe_trace_func+0x440/0x440 [ 1680.570818][T27550] trace_uprobe_register+0x88/0x410 [ 1680.575996][T27550] perf_trace_event_init+0x34e/0x790 [ 1680.581278][T27550] perf_uprobe_init+0xf5/0x140 [ 1680.586022][T27550] perf_uprobe_event_init+0xde/0x140 [ 1680.591327][T27550] perf_try_init_event+0x21a/0x400 [ 1680.596435][T27550] perf_event_alloc+0xa60/0x1790 [ 1680.601368][T27550] __se_sys_perf_event_open+0x5db/0x2810 [ 1680.606977][T27550] ? proc_fail_nth_read+0x150/0x150 [ 1680.612253][T27550] __x64_sys_perf_event_open+0x63/0x70 [ 1680.617691][T27550] do_syscall_64+0x44/0xa0 [ 1680.622141][T27550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1680.628030][T27550] RIP: 0033:0x4665f9 [ 1680.631985][T27550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.651584][T27550] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1680.659975][T27550] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1680.667965][T27550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1680.675919][T27550] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.683883][T27550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x70010000, 0x0, 0x0, 0x0) 04:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x71000000, 0x0, 0x0, 0x0) [ 1680.691845][T27550] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1680.710965][T27554] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:19 executing program 0 (fault-call:2 fault-nth:52): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1680.799533][T27567] FAULT_INJECTION: forcing a failure. [ 1680.799533][T27567] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.812273][T27567] CPU: 0 PID: 27567 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1680.820688][T27567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.830739][T27567] Call Trace: [ 1680.834034][T27567] dump_stack_lvl+0xd6/0x122 [ 1680.838604][T27567] dump_stack+0x11/0x1b [ 1680.842802][T27567] should_fail+0x23c/0x250 [ 1680.847194][T27567] __should_failslab+0x81/0x90 [ 1680.851935][T27567] ? register_for_each_vma+0x372/0x890 [ 1680.857485][T27567] should_failslab+0x5/0x20 [ 1680.861967][T27567] kmem_cache_alloc_trace+0x52/0x320 [ 1680.867238][T27567] ? register_for_each_vma+0x372/0x890 [ 1680.872685][T27567] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1680.878649][T27567] register_for_each_vma+0x372/0x890 [ 1680.883936][T27567] __uprobe_register+0x404/0x8b0 [ 1680.888900][T27567] uprobe_register_refctr+0x29/0x40 [ 1680.894160][T27567] probe_event_enable+0x2be/0x7d0 [ 1680.899175][T27567] ? __uprobe_trace_func+0x440/0x440 [ 1680.904438][T27567] trace_uprobe_register+0x88/0x410 [ 1680.909610][T27567] perf_trace_event_init+0x34e/0x790 [ 1680.914903][T27567] perf_uprobe_init+0xf5/0x140 [ 1680.919686][T27567] perf_uprobe_event_init+0xde/0x140 [ 1680.924972][T27567] perf_try_init_event+0x21a/0x400 [ 1680.930063][T27567] perf_event_alloc+0xa60/0x1790 [ 1680.934980][T27567] __se_sys_perf_event_open+0x5db/0x2810 [ 1680.940659][T27567] ? proc_fail_nth_read+0x150/0x150 [ 1680.945916][T27567] __x64_sys_perf_event_open+0x63/0x70 [ 1680.951373][T27567] do_syscall_64+0x44/0xa0 [ 1680.955777][T27567] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1680.961666][T27567] RIP: 0033:0x4665f9 [ 1680.965538][T27567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.985219][T27567] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x71010000, 0x0, 0x0, 0x0) [ 1680.993605][T27567] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1681.001561][T27567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1681.009525][T27567] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.017482][T27567] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1681.025434][T27567] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:19 executing program 0 (fault-call:2 fault-nth:53): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1681.049684][T27568] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:19 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x72000000, 0x0, 0x0, 0x0) [ 1681.123179][T27586] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1681.149253][T27588] FAULT_INJECTION: forcing a failure. [ 1681.149253][T27588] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.161948][T27588] CPU: 1 PID: 27588 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1681.170386][T27588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.180429][T27588] Call Trace: [ 1681.183700][T27588] dump_stack_lvl+0xd6/0x122 [ 1681.188289][T27588] dump_stack+0x11/0x1b [ 1681.192443][T27588] should_fail+0x23c/0x250 [ 1681.196858][T27588] __should_failslab+0x81/0x90 [ 1681.201678][T27588] ? register_for_each_vma+0x372/0x890 [ 1681.207144][T27588] should_failslab+0x5/0x20 [ 1681.211629][T27588] kmem_cache_alloc_trace+0x52/0x320 [ 1681.216889][T27588] ? register_for_each_vma+0x372/0x890 [ 1681.222324][T27588] ? vma_interval_tree_iter_next+0x263/0x280 [ 1681.228289][T27588] register_for_each_vma+0x372/0x890 [ 1681.233649][T27588] __uprobe_register+0x404/0x8b0 [ 1681.238577][T27588] uprobe_register_refctr+0x29/0x40 [ 1681.243768][T27588] probe_event_enable+0x2be/0x7d0 [ 1681.248774][T27588] ? __uprobe_trace_func+0x440/0x440 [ 1681.254037][T27588] trace_uprobe_register+0x88/0x410 [ 1681.259255][T27588] perf_trace_event_init+0x34e/0x790 [ 1681.264527][T27588] perf_uprobe_init+0xf5/0x140 [ 1681.269360][T27588] perf_uprobe_event_init+0xde/0x140 [ 1681.274632][T27588] perf_try_init_event+0x21a/0x400 [ 1681.279826][T27588] perf_event_alloc+0xa60/0x1790 [ 1681.284760][T27588] __se_sys_perf_event_open+0x5db/0x2810 [ 1681.290411][T27588] ? proc_fail_nth_read+0x150/0x150 [ 1681.295634][T27588] __x64_sys_perf_event_open+0x63/0x70 [ 1681.301081][T27588] do_syscall_64+0x44/0xa0 [ 1681.305496][T27588] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1681.311408][T27588] RIP: 0033:0x4665f9 [ 1681.315286][T27588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.334912][T27588] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1681.343307][T27588] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1681.351285][T27588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1681.359280][T27588] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x72010000, 0x0, 0x0, 0x0) [ 1681.367228][T27588] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1681.375178][T27588] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1681.385722][T27590] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:20 executing program 0 (fault-call:2 fault-nth:54): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x73000000, 0x0, 0x0, 0x0) [ 1681.479975][T27612] FAULT_INJECTION: forcing a failure. [ 1681.479975][T27612] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.492694][T27612] CPU: 0 PID: 27612 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1681.501098][T27612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.511128][T27612] Call Trace: [ 1681.514428][T27612] dump_stack_lvl+0xd6/0x122 [ 1681.518999][T27612] dump_stack+0x11/0x1b [ 1681.523134][T27612] should_fail+0x23c/0x250 [ 1681.527617][T27612] __should_failslab+0x81/0x90 [ 1681.532358][T27612] ? register_for_each_vma+0x372/0x890 [ 1681.537795][T27612] should_failslab+0x5/0x20 [ 1681.542277][T27612] kmem_cache_alloc_trace+0x52/0x320 [ 1681.547540][T27612] ? register_for_each_vma+0x372/0x890 [ 1681.552984][T27612] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1681.558967][T27612] register_for_each_vma+0x372/0x890 [ 1681.564252][T27612] __uprobe_register+0x404/0x8b0 [ 1681.569176][T27612] uprobe_register_refctr+0x29/0x40 [ 1681.574413][T27612] probe_event_enable+0x2be/0x7d0 [ 1681.579426][T27612] ? __uprobe_trace_func+0x440/0x440 [ 1681.584704][T27612] trace_uprobe_register+0x88/0x410 [ 1681.589892][T27612] perf_trace_event_init+0x34e/0x790 [ 1681.595207][T27612] perf_uprobe_init+0xf5/0x140 [ 1681.599962][T27612] perf_uprobe_event_init+0xde/0x140 [ 1681.605278][T27612] perf_try_init_event+0x21a/0x400 [ 1681.610441][T27612] perf_event_alloc+0xa60/0x1790 [ 1681.615387][T27612] __se_sys_perf_event_open+0x5db/0x2810 [ 1681.621049][T27612] ? proc_fail_nth_read+0x150/0x150 [ 1681.626280][T27612] __x64_sys_perf_event_open+0x63/0x70 [ 1681.631738][T27612] do_syscall_64+0x44/0xa0 [ 1681.636227][T27612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1681.642114][T27612] RIP: 0033:0x4665f9 [ 1681.645984][T27612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.665593][T27612] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1681.673982][T27612] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1681.681942][T27612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1681.689892][T27612] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.697839][T27612] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1681.705852][T27612] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:20 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x73010000, 0x0, 0x0, 0x0) 04:46:20 executing program 0 (fault-call:2 fault-nth:55): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1681.740000][T27615] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1681.807353][T27632] FAULT_INJECTION: forcing a failure. [ 1681.807353][T27632] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.819990][T27632] CPU: 0 PID: 27632 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1681.828433][T27632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.838479][T27632] Call Trace: [ 1681.841739][T27632] dump_stack_lvl+0xd6/0x122 [ 1681.846317][T27632] dump_stack+0x11/0x1b [ 1681.850451][T27632] should_fail+0x23c/0x250 [ 1681.854856][T27632] __should_failslab+0x81/0x90 [ 1681.859642][T27632] ? register_for_each_vma+0x372/0x890 [ 1681.865098][T27632] should_failslab+0x5/0x20 [ 1681.869579][T27632] kmem_cache_alloc_trace+0x52/0x320 [ 1681.874842][T27632] ? register_for_each_vma+0x372/0x890 [ 1681.880287][T27632] ? vma_interval_tree_iter_next+0x263/0x280 [ 1681.886271][T27632] register_for_each_vma+0x372/0x890 [ 1681.891541][T27632] __uprobe_register+0x404/0x8b0 [ 1681.896513][T27632] uprobe_register_refctr+0x29/0x40 [ 1681.901834][T27632] probe_event_enable+0x2be/0x7d0 [ 1681.906902][T27632] ? __uprobe_trace_func+0x440/0x440 [ 1681.912187][T27632] trace_uprobe_register+0x88/0x410 [ 1681.917366][T27632] perf_trace_event_init+0x34e/0x790 [ 1681.922711][T27632] perf_uprobe_init+0xf5/0x140 [ 1681.927459][T27632] perf_uprobe_event_init+0xde/0x140 [ 1681.932796][T27632] perf_try_init_event+0x21a/0x400 [ 1681.937897][T27632] perf_event_alloc+0xa60/0x1790 [ 1681.942820][T27632] __se_sys_perf_event_open+0x5db/0x2810 [ 1681.948441][T27632] ? proc_fail_nth_read+0x150/0x150 [ 1681.953619][T27632] __x64_sys_perf_event_open+0x63/0x70 [ 1681.959058][T27632] do_syscall_64+0x44/0xa0 [ 1681.963460][T27632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1681.969376][T27632] RIP: 0033:0x4665f9 [ 1681.973253][T27632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.992852][T27632] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:20 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x74000000, 0x0, 0x0, 0x0) [ 1682.001294][T27632] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1682.009252][T27632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1682.017201][T27632] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.025153][T27632] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1682.033110][T27632] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:20 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x74010000, 0x0, 0x0, 0x0) 04:46:20 executing program 0 (fault-call:2 fault-nth:56): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.059478][T27641] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1682.093475][T27642] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.115857][T27651] FAULT_INJECTION: forcing a failure. [ 1682.115857][T27651] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.128489][T27651] CPU: 0 PID: 27651 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1682.136900][T27651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.146957][T27651] Call Trace: [ 1682.150226][T27651] dump_stack_lvl+0xd6/0x122 [ 1682.154802][T27651] dump_stack+0x11/0x1b [ 1682.158949][T27651] should_fail+0x23c/0x250 [ 1682.163355][T27651] __should_failslab+0x81/0x90 [ 1682.168110][T27651] ? register_for_each_vma+0x372/0x890 [ 1682.173619][T27651] should_failslab+0x5/0x20 [ 1682.178127][T27651] kmem_cache_alloc_trace+0x52/0x320 [ 1682.183464][T27651] ? register_for_each_vma+0x372/0x890 [ 1682.188899][T27651] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1682.194859][T27651] register_for_each_vma+0x372/0x890 [ 1682.200126][T27651] __uprobe_register+0x404/0x8b0 [ 1682.205071][T27651] uprobe_register_refctr+0x29/0x40 [ 1682.210249][T27651] probe_event_enable+0x2be/0x7d0 [ 1682.215260][T27651] ? __uprobe_trace_func+0x440/0x440 [ 1682.220577][T27651] trace_uprobe_register+0x88/0x410 [ 1682.225801][T27651] perf_trace_event_init+0x34e/0x790 [ 1682.231067][T27651] perf_uprobe_init+0xf5/0x140 [ 1682.235812][T27651] perf_uprobe_event_init+0xde/0x140 [ 1682.241133][T27651] perf_try_init_event+0x21a/0x400 [ 1682.246362][T27651] perf_event_alloc+0xa60/0x1790 [ 1682.251279][T27651] __se_sys_perf_event_open+0x5db/0x2810 [ 1682.256906][T27651] ? proc_fail_nth_read+0x150/0x150 [ 1682.262157][T27651] __x64_sys_perf_event_open+0x63/0x70 [ 1682.267593][T27651] do_syscall_64+0x44/0xa0 [ 1682.272049][T27651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.277924][T27651] RIP: 0033:0x4665f9 [ 1682.281805][T27651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.301392][T27651] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x25000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x75000000, 0x0, 0x0, 0x0) 04:46:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.309800][T27651] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1682.317763][T27651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1682.325732][T27651] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.333716][T27651] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1682.341772][T27651] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:21 executing program 0 (fault-call:2 fault-nth:57): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x75010000, 0x0, 0x0, 0x0) 04:46:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.415292][T27667] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1682.435821][T27675] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1682.468520][T27672] FAULT_INJECTION: forcing a failure. [ 1682.468520][T27672] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.481152][T27672] CPU: 0 PID: 27672 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1682.489638][T27672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.499674][T27672] Call Trace: [ 1682.502952][T27672] dump_stack_lvl+0xd6/0x122 [ 1682.507523][T27672] dump_stack+0x11/0x1b [ 1682.511655][T27672] should_fail+0x23c/0x250 [ 1682.516046][T27672] __should_failslab+0x81/0x90 [ 1682.520831][T27672] ? register_for_each_vma+0x372/0x890 [ 1682.526285][T27672] should_failslab+0x5/0x20 [ 1682.530782][T27672] kmem_cache_alloc_trace+0x52/0x320 [ 1682.536094][T27672] ? register_for_each_vma+0x372/0x890 [ 1682.541593][T27672] ? vma_interval_tree_iter_next+0x263/0x280 [ 1682.547571][T27672] register_for_each_vma+0x372/0x890 [ 1682.552845][T27672] __uprobe_register+0x404/0x8b0 [ 1682.557761][T27672] uprobe_register_refctr+0x29/0x40 [ 1682.562950][T27672] probe_event_enable+0x2be/0x7d0 [ 1682.568099][T27672] ? __uprobe_trace_func+0x440/0x440 [ 1682.573393][T27672] trace_uprobe_register+0x88/0x410 [ 1682.578571][T27672] perf_trace_event_init+0x34e/0x790 [ 1682.583842][T27672] perf_uprobe_init+0xf5/0x140 [ 1682.588601][T27672] perf_uprobe_event_init+0xde/0x140 [ 1682.593868][T27672] perf_try_init_event+0x21a/0x400 [ 1682.598963][T27672] perf_event_alloc+0xa60/0x1790 [ 1682.603880][T27672] __se_sys_perf_event_open+0x5db/0x2810 [ 1682.609507][T27672] ? proc_fail_nth_read+0x150/0x150 [ 1682.614768][T27672] __x64_sys_perf_event_open+0x63/0x70 [ 1682.620282][T27672] do_syscall_64+0x44/0xa0 [ 1682.624728][T27672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.630657][T27672] RIP: 0033:0x4665f9 [ 1682.634532][T27672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.654223][T27672] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x76000000, 0x0, 0x0, 0x0) [ 1682.662611][T27672] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1682.670566][T27672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1682.678524][T27672] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.686500][T27672] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1682.694451][T27672] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x76010000, 0x0, 0x0, 0x0) 04:46:21 executing program 0 (fault-call:2 fault-nth:58): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.727753][T27682] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x77000000, 0x0, 0x0, 0x0) 04:46:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1682.776810][T27683] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1682.820482][T27696] FAULT_INJECTION: forcing a failure. [ 1682.820482][T27696] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.833235][T27696] CPU: 1 PID: 27696 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1682.841652][T27696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.851694][T27696] Call Trace: [ 1682.854993][T27696] dump_stack_lvl+0xd6/0x122 [ 1682.859639][T27696] dump_stack+0x11/0x1b [ 1682.863842][T27696] should_fail+0x23c/0x250 [ 1682.868234][T27696] __should_failslab+0x81/0x90 [ 1682.873052][T27696] ? register_for_each_vma+0x372/0x890 [ 1682.878486][T27696] should_failslab+0x5/0x20 [ 1682.882987][T27696] kmem_cache_alloc_trace+0x52/0x320 [ 1682.888264][T27696] ? register_for_each_vma+0x372/0x890 [ 1682.893754][T27696] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1682.899805][T27696] register_for_each_vma+0x372/0x890 [ 1682.905093][T27696] __uprobe_register+0x404/0x8b0 [ 1682.910018][T27696] uprobe_register_refctr+0x29/0x40 [ 1682.915198][T27696] probe_event_enable+0x2be/0x7d0 [ 1682.920203][T27696] ? __uprobe_trace_func+0x440/0x440 [ 1682.925467][T27696] trace_uprobe_register+0x88/0x410 [ 1682.930641][T27696] perf_trace_event_init+0x34e/0x790 [ 1682.935988][T27696] perf_uprobe_init+0xf5/0x140 [ 1682.940734][T27696] perf_uprobe_event_init+0xde/0x140 [ 1682.946019][T27696] perf_try_init_event+0x21a/0x400 [ 1682.951112][T27696] perf_event_alloc+0xa60/0x1790 [ 1682.956026][T27696] __se_sys_perf_event_open+0x5db/0x2810 [ 1682.961712][T27696] ? proc_fail_nth_read+0x150/0x150 [ 1682.966950][T27696] __x64_sys_perf_event_open+0x63/0x70 [ 1682.972442][T27696] do_syscall_64+0x44/0xa0 [ 1682.976879][T27696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.982766][T27696] RIP: 0033:0x4665f9 [ 1682.986705][T27696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.006643][T27696] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x77010000, 0x0, 0x0, 0x0) 04:46:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1683.015039][T27696] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1683.022994][T27696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1683.030956][T27696] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.038915][T27696] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1683.046879][T27696] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:21 executing program 0 (fault-call:2 fault-nth:59): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:21 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x78000000, 0x0, 0x0, 0x0) [ 1683.072189][T27703] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1683.130479][T27705] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1683.142328][T27717] FAULT_INJECTION: forcing a failure. [ 1683.142328][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.154956][T27717] CPU: 1 PID: 27717 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1683.163362][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.173455][T27717] Call Trace: [ 1683.176795][T27717] dump_stack_lvl+0xd6/0x122 [ 1683.181368][T27717] dump_stack+0x11/0x1b [ 1683.185512][T27717] should_fail+0x23c/0x250 [ 1683.189915][T27717] __should_failslab+0x81/0x90 [ 1683.194664][T27717] ? register_for_each_vma+0x372/0x890 [ 1683.200188][T27717] should_failslab+0x5/0x20 [ 1683.204675][T27717] kmem_cache_alloc_trace+0x52/0x320 [ 1683.209957][T27717] ? register_for_each_vma+0x372/0x890 [ 1683.215411][T27717] ? vma_interval_tree_iter_next+0x263/0x280 [ 1683.221509][T27717] register_for_each_vma+0x372/0x890 [ 1683.226771][T27717] __uprobe_register+0x404/0x8b0 [ 1683.231688][T27717] uprobe_register_refctr+0x29/0x40 [ 1683.236885][T27717] probe_event_enable+0x2be/0x7d0 [ 1683.241937][T27717] ? __uprobe_trace_func+0x440/0x440 [ 1683.247212][T27717] trace_uprobe_register+0x88/0x410 [ 1683.252437][T27717] perf_trace_event_init+0x34e/0x790 [ 1683.257710][T27717] perf_uprobe_init+0xf5/0x140 [ 1683.262476][T27717] perf_uprobe_event_init+0xde/0x140 [ 1683.267746][T27717] perf_try_init_event+0x21a/0x400 [ 1683.272852][T27717] perf_event_alloc+0xa60/0x1790 [ 1683.277773][T27717] __se_sys_perf_event_open+0x5db/0x2810 [ 1683.283475][T27717] ? proc_fail_nth_read+0x150/0x150 [ 1683.288661][T27717] __x64_sys_perf_event_open+0x63/0x70 [ 1683.294143][T27717] do_syscall_64+0x44/0xa0 [ 1683.298561][T27717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.304517][T27717] RIP: 0033:0x4665f9 [ 1683.308386][T27717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:46:22 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x78010000, 0x0, 0x0, 0x0) 04:46:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 0 (fault-call:2 fault-nth:60): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1683.328013][T27717] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1683.336409][T27717] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1683.344363][T27717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1683.352326][T27717] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.360374][T27717] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1683.368352][T27717] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x79000000, 0x0, 0x0, 0x0) 04:46:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1683.437812][T27728] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1683.462777][T27737] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1683.486607][T27734] FAULT_INJECTION: forcing a failure. [ 1683.486607][T27734] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.499246][T27734] CPU: 0 PID: 27734 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1683.507658][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.517711][T27734] Call Trace: [ 1683.520985][T27734] dump_stack_lvl+0xd6/0x122 [ 1683.525622][T27734] dump_stack+0x11/0x1b [ 1683.529827][T27734] should_fail+0x23c/0x250 [ 1683.534236][T27734] __should_failslab+0x81/0x90 [ 1683.538995][T27734] ? register_for_each_vma+0x372/0x890 [ 1683.544456][T27734] should_failslab+0x5/0x20 [ 1683.548957][T27734] kmem_cache_alloc_trace+0x52/0x320 [ 1683.554339][T27734] ? register_for_each_vma+0x372/0x890 [ 1683.559798][T27734] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1683.566089][T27734] register_for_each_vma+0x372/0x890 [ 1683.571359][T27734] __uprobe_register+0x404/0x8b0 [ 1683.576282][T27734] uprobe_register_refctr+0x29/0x40 [ 1683.581462][T27734] probe_event_enable+0x2be/0x7d0 [ 1683.586476][T27734] ? __uprobe_trace_func+0x440/0x440 [ 1683.591752][T27734] trace_uprobe_register+0x88/0x410 [ 1683.596938][T27734] perf_trace_event_init+0x34e/0x790 [ 1683.602207][T27734] perf_uprobe_init+0xf5/0x140 [ 1683.606965][T27734] perf_uprobe_event_init+0xde/0x140 [ 1683.612255][T27734] perf_try_init_event+0x21a/0x400 [ 1683.617352][T27734] perf_event_alloc+0xa60/0x1790 [ 1683.622332][T27734] __se_sys_perf_event_open+0x5db/0x2810 [ 1683.627956][T27734] ? proc_fail_nth_read+0x150/0x150 [ 1683.633132][T27734] __x64_sys_perf_event_open+0x63/0x70 [ 1683.638667][T27734] do_syscall_64+0x44/0xa0 [ 1683.643147][T27734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.649033][T27734] RIP: 0033:0x4665f9 [ 1683.652905][T27734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.672503][T27734] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1683.680891][T27734] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 04:46:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x79010000, 0x0, 0x0, 0x0) [ 1683.688847][T27734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1683.696794][T27734] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.704806][T27734] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1683.712787][T27734] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:22 executing program 0 (fault-call:2 fault-nth:61): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1683.756004][T27745] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1683.786625][T27754] FAULT_INJECTION: forcing a failure. [ 1683.786625][T27754] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.799256][T27754] CPU: 1 PID: 27754 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1683.807668][T27754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.817726][T27754] Call Trace: [ 1683.820996][T27754] dump_stack_lvl+0xd6/0x122 [ 1683.825579][T27754] dump_stack+0x11/0x1b [ 1683.829712][T27754] should_fail+0x23c/0x250 [ 1683.834118][T27754] __should_failslab+0x81/0x90 [ 1683.838927][T27754] ? register_for_each_vma+0x372/0x890 [ 1683.844432][T27754] should_failslab+0x5/0x20 [ 1683.848914][T27754] kmem_cache_alloc_trace+0x52/0x320 [ 1683.854178][T27754] ? register_for_each_vma+0x372/0x890 [ 1683.859616][T27754] ? vma_interval_tree_iter_next+0x263/0x280 [ 1683.865597][T27754] register_for_each_vma+0x372/0x890 [ 1683.870922][T27754] __uprobe_register+0x404/0x8b0 [ 1683.875836][T27754] uprobe_register_refctr+0x29/0x40 [ 1683.881012][T27754] probe_event_enable+0x2be/0x7d0 [ 1683.886125][T27754] ? __uprobe_trace_func+0x440/0x440 [ 1683.891440][T27754] trace_uprobe_register+0x88/0x410 [ 1683.896648][T27754] perf_trace_event_init+0x34e/0x790 [ 1683.902011][T27754] perf_uprobe_init+0xf5/0x140 [ 1683.906854][T27754] perf_uprobe_event_init+0xde/0x140 [ 1683.912119][T27754] perf_try_init_event+0x21a/0x400 [ 1683.917211][T27754] perf_event_alloc+0xa60/0x1790 [ 1683.922163][T27754] __se_sys_perf_event_open+0x5db/0x2810 [ 1683.927773][T27754] ? proc_fail_nth_read+0x150/0x150 [ 1683.933026][T27754] __x64_sys_perf_event_open+0x63/0x70 [ 1683.938480][T27754] do_syscall_64+0x44/0xa0 [ 1683.942895][T27754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.948776][T27754] RIP: 0033:0x4665f9 [ 1683.952646][T27754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.972306][T27754] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1683.980698][T27754] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1683.988647][T27754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1683.996701][T27754] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:22 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7a000000, 0x0, 0x0, 0x0) 04:46:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.004828][T27754] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1684.012779][T27754] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1684.037250][T27756] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:22 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7a010000, 0x0, 0x0, 0x0) 04:46:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 0 (fault-call:2 fault-nth:62): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.093775][T27766] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1684.107606][T27771] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1684.161295][T27778] FAULT_INJECTION: forcing a failure. [ 1684.161295][T27778] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.173937][T27778] CPU: 1 PID: 27778 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1684.182347][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.192396][T27778] Call Trace: [ 1684.195658][T27778] dump_stack_lvl+0xd6/0x122 [ 1684.200235][T27778] dump_stack+0x11/0x1b [ 1684.204369][T27778] should_fail+0x23c/0x250 [ 1684.208762][T27778] __should_failslab+0x81/0x90 [ 1684.213555][T27778] ? register_for_each_vma+0x372/0x890 [ 1684.219044][T27778] should_failslab+0x5/0x20 [ 1684.223651][T27778] kmem_cache_alloc_trace+0x52/0x320 [ 1684.228912][T27778] ? register_for_each_vma+0x372/0x890 [ 1684.234353][T27778] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1684.240350][T27778] register_for_each_vma+0x372/0x890 [ 1684.245626][T27778] __uprobe_register+0x404/0x8b0 [ 1684.250540][T27778] uprobe_register_refctr+0x29/0x40 [ 1684.255720][T27778] probe_event_enable+0x2be/0x7d0 [ 1684.260722][T27778] ? __uprobe_trace_func+0x440/0x440 [ 1684.265982][T27778] trace_uprobe_register+0x88/0x410 [ 1684.271168][T27778] perf_trace_event_init+0x34e/0x790 [ 1684.276506][T27778] perf_uprobe_init+0xf5/0x140 [ 1684.281273][T27778] perf_uprobe_event_init+0xde/0x140 [ 1684.286557][T27778] perf_try_init_event+0x21a/0x400 [ 1684.291774][T27778] perf_event_alloc+0xa60/0x1790 [ 1684.296852][T27778] __se_sys_perf_event_open+0x5db/0x2810 [ 1684.302463][T27778] ? proc_fail_nth_read+0x150/0x150 [ 1684.307701][T27778] __x64_sys_perf_event_open+0x63/0x70 [ 1684.313141][T27778] do_syscall_64+0x44/0xa0 [ 1684.317617][T27778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.323539][T27778] RIP: 0033:0x4665f9 [ 1684.327424][T27778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.347011][T27778] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:23 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7b000000, 0x0, 0x0, 0x0) [ 1684.355465][T27778] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1684.363441][T27778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1684.371390][T27778] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.379338][T27778] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1684.387396][T27778] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x60000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7b010000, 0x0, 0x0, 0x0) 04:46:23 executing program 0 (fault-call:2 fault-nth:63): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.413585][T27782] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.509653][T27794] FAULT_INJECTION: forcing a failure. [ 1684.509653][T27794] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.522367][T27794] CPU: 1 PID: 27794 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1684.530771][T27794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.540820][T27794] Call Trace: [ 1684.544094][T27794] dump_stack_lvl+0xd6/0x122 [ 1684.548676][T27794] dump_stack+0x11/0x1b [ 1684.552833][T27794] should_fail+0x23c/0x250 [ 1684.557323][T27794] __should_failslab+0x81/0x90 [ 1684.562081][T27794] ? register_for_each_vma+0x372/0x890 [ 1684.567630][T27794] should_failslab+0x5/0x20 [ 1684.572123][T27794] kmem_cache_alloc_trace+0x52/0x320 [ 1684.577511][T27794] ? register_for_each_vma+0x372/0x890 [ 1684.582996][T27794] ? vma_interval_tree_iter_next+0x263/0x280 [ 1684.588957][T27794] register_for_each_vma+0x372/0x890 [ 1684.594258][T27794] __uprobe_register+0x404/0x8b0 [ 1684.599183][T27794] uprobe_register_refctr+0x29/0x40 [ 1684.604377][T27794] probe_event_enable+0x2be/0x7d0 [ 1684.609381][T27794] ? __uprobe_trace_func+0x440/0x440 [ 1684.614815][T27794] trace_uprobe_register+0x88/0x410 [ 1684.620033][T27794] perf_trace_event_init+0x34e/0x790 [ 1684.625355][T27794] perf_uprobe_init+0xf5/0x140 [ 1684.630117][T27794] perf_uprobe_event_init+0xde/0x140 [ 1684.635482][T27794] perf_try_init_event+0x21a/0x400 [ 1684.640615][T27794] perf_event_alloc+0xa60/0x1790 [ 1684.645530][T27794] __se_sys_perf_event_open+0x5db/0x2810 [ 1684.651152][T27794] ? proc_fail_nth_read+0x150/0x150 [ 1684.656392][T27794] __x64_sys_perf_event_open+0x63/0x70 [ 1684.661840][T27794] do_syscall_64+0x44/0xa0 [ 1684.666238][T27794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.672113][T27794] RIP: 0033:0x4665f9 [ 1684.676133][T27794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.695936][T27794] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7c000000, 0x0, 0x0, 0x0) 04:46:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.704336][T27794] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1684.712288][T27794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1684.720239][T27794] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.728191][T27794] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1684.736138][T27794] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:23 executing program 0 (fault-call:2 fault-nth:64): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1684.763047][T27803] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1684.808087][T27816] FAULT_INJECTION: forcing a failure. [ 1684.808087][T27816] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.820709][T27816] CPU: 0 PID: 27816 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1684.829097][T27816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.839127][T27816] Call Trace: [ 1684.842387][T27816] dump_stack_lvl+0xd6/0x122 [ 1684.846960][T27816] dump_stack+0x11/0x1b [ 1684.851102][T27816] should_fail+0x23c/0x250 [ 1684.855503][T27816] __should_failslab+0x81/0x90 [ 1684.860250][T27816] ? register_for_each_vma+0x372/0x890 [ 1684.865703][T27816] should_failslab+0x5/0x20 [ 1684.870187][T27816] kmem_cache_alloc_trace+0x52/0x320 [ 1684.875470][T27816] ? register_for_each_vma+0x372/0x890 [ 1684.880911][T27816] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1684.886880][T27816] register_for_each_vma+0x372/0x890 [ 1684.892141][T27816] __uprobe_register+0x404/0x8b0 [ 1684.897057][T27816] uprobe_register_refctr+0x29/0x40 [ 1684.902235][T27816] probe_event_enable+0x2be/0x7d0 [ 1684.907255][T27816] ? __uprobe_trace_func+0x440/0x440 [ 1684.912517][T27816] trace_uprobe_register+0x88/0x410 [ 1684.917694][T27816] perf_trace_event_init+0x34e/0x790 [ 1684.923072][T27816] perf_uprobe_init+0xf5/0x140 [ 1684.927833][T27816] perf_uprobe_event_init+0xde/0x140 [ 1684.933150][T27816] perf_try_init_event+0x21a/0x400 [ 1684.938252][T27816] perf_event_alloc+0xa60/0x1790 [ 1684.943195][T27816] __se_sys_perf_event_open+0x5db/0x2810 [ 1684.948814][T27816] ? proc_fail_nth_read+0x150/0x150 [ 1684.953994][T27816] __x64_sys_perf_event_open+0x63/0x70 [ 1684.959459][T27816] do_syscall_64+0x44/0xa0 [ 1684.963989][T27816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.969878][T27816] RIP: 0033:0x4665f9 [ 1684.973822][T27816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.993404][T27816] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:23 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7c010000, 0x0, 0x0, 0x0) [ 1685.001808][T27816] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1685.009774][T27816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1685.017726][T27816] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.025690][T27816] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1685.033683][T27816] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7d000000, 0x0, 0x0, 0x0) 04:46:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:23 executing program 0 (fault-call:2 fault-nth:65): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1685.066649][T27818] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1685.123018][T27828] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1685.145227][T27838] FAULT_INJECTION: forcing a failure. [ 1685.145227][T27838] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.157870][T27838] CPU: 0 PID: 27838 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1685.166344][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1685.176479][T27838] Call Trace: [ 1685.179752][T27838] dump_stack_lvl+0xd6/0x122 [ 1685.184406][T27838] dump_stack+0x11/0x1b [ 1685.188539][T27838] should_fail+0x23c/0x250 [ 1685.192930][T27838] __should_failslab+0x81/0x90 [ 1685.197691][T27838] ? register_for_each_vma+0x372/0x890 [ 1685.203130][T27838] should_failslab+0x5/0x20 [ 1685.207616][T27838] kmem_cache_alloc_trace+0x52/0x320 [ 1685.212956][T27838] ? register_for_each_vma+0x372/0x890 [ 1685.218411][T27838] ? vma_interval_tree_iter_next+0x263/0x280 [ 1685.224395][T27838] register_for_each_vma+0x372/0x890 [ 1685.229662][T27838] __uprobe_register+0x404/0x8b0 [ 1685.234575][T27838] uprobe_register_refctr+0x29/0x40 [ 1685.239799][T27838] probe_event_enable+0x2be/0x7d0 [ 1685.244813][T27838] ? __uprobe_trace_func+0x440/0x440 [ 1685.250091][T27838] trace_uprobe_register+0x88/0x410 [ 1685.255302][T27838] perf_trace_event_init+0x34e/0x790 [ 1685.260623][T27838] perf_uprobe_init+0xf5/0x140 [ 1685.265442][T27838] perf_uprobe_event_init+0xde/0x140 [ 1685.270830][T27838] perf_try_init_event+0x21a/0x400 [ 1685.275921][T27838] perf_event_alloc+0xa60/0x1790 [ 1685.280902][T27838] __se_sys_perf_event_open+0x5db/0x2810 [ 1685.286530][T27838] ? proc_fail_nth_read+0x150/0x150 [ 1685.291782][T27838] __x64_sys_perf_event_open+0x63/0x70 [ 1685.297226][T27838] do_syscall_64+0x44/0xa0 [ 1685.301706][T27838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1685.307582][T27838] RIP: 0033:0x4665f9 [ 1685.311465][T27838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.331111][T27838] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1685.339499][T27838] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1685.347449][T27838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1685.355401][T27838] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.363418][T27838] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7e000000, 0x0, 0x0, 0x0) [ 1685.371455][T27838] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1685.394292][T27839] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:24 executing program 0 (fault-call:2 fault-nth:66): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7f000000, 0x0, 0x0, 0x0) 04:46:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1685.488265][T27856] FAULT_INJECTION: forcing a failure. [ 1685.488265][T27856] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.500899][T27856] CPU: 1 PID: 27856 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1685.509405][T27856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1685.519455][T27856] Call Trace: [ 1685.522742][T27856] dump_stack_lvl+0xd6/0x122 [ 1685.527371][T27856] dump_stack+0x11/0x1b [ 1685.531513][T27856] should_fail+0x23c/0x250 [ 1685.535907][T27856] __should_failslab+0x81/0x90 [ 1685.540649][T27856] ? register_for_each_vma+0x372/0x890 [ 1685.546160][T27856] should_failslab+0x5/0x20 [ 1685.550671][T27856] kmem_cache_alloc_trace+0x52/0x320 [ 1685.555941][T27856] ? register_for_each_vma+0x372/0x890 [ 1685.561376][T27856] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1685.567374][T27856] register_for_each_vma+0x372/0x890 [ 1685.572639][T27856] __uprobe_register+0x404/0x8b0 [ 1685.577634][T27856] uprobe_register_refctr+0x29/0x40 [ 1685.582821][T27856] probe_event_enable+0x2be/0x7d0 [ 1685.587844][T27856] ? __uprobe_trace_func+0x440/0x440 [ 1685.593109][T27856] trace_uprobe_register+0x88/0x410 [ 1685.598299][T27856] perf_trace_event_init+0x34e/0x790 [ 1685.603582][T27856] perf_uprobe_init+0xf5/0x140 [ 1685.608385][T27856] perf_uprobe_event_init+0xde/0x140 [ 1685.613735][T27856] perf_try_init_event+0x21a/0x400 [ 1685.618858][T27856] perf_event_alloc+0xa60/0x1790 [ 1685.623814][T27856] __se_sys_perf_event_open+0x5db/0x2810 [ 1685.629428][T27856] ? proc_fail_nth_read+0x150/0x150 [ 1685.634610][T27856] __x64_sys_perf_event_open+0x63/0x70 [ 1685.640047][T27856] do_syscall_64+0x44/0xa0 [ 1685.644445][T27856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1685.650442][T27856] RIP: 0033:0x4665f9 [ 1685.654328][T27856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.673953][T27856] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x7ffff000, 0x0, 0x0, 0x0) [ 1685.682379][T27856] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1685.690329][T27856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1685.698291][T27856] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.706283][T27856] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1685.714257][T27856] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:24 executing program 0 (fault-call:2 fault-nth:67): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x81000000, 0x0, 0x0, 0x0) [ 1685.748292][T27862] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1685.811870][T27872] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1685.841682][T27878] FAULT_INJECTION: forcing a failure. [ 1685.841682][T27878] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.854304][T27878] CPU: 0 PID: 27878 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1685.862767][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1685.872806][T27878] Call Trace: [ 1685.876068][T27878] dump_stack_lvl+0xd6/0x122 [ 1685.880735][T27878] dump_stack+0x11/0x1b [ 1685.884871][T27878] should_fail+0x23c/0x250 [ 1685.889295][T27878] __should_failslab+0x81/0x90 [ 1685.894054][T27878] ? register_for_each_vma+0x372/0x890 [ 1685.899509][T27878] should_failslab+0x5/0x20 [ 1685.904009][T27878] kmem_cache_alloc_trace+0x52/0x320 [ 1685.909297][T27878] ? register_for_each_vma+0x372/0x890 [ 1685.914741][T27878] ? vma_interval_tree_iter_next+0x263/0x280 [ 1685.920708][T27878] register_for_each_vma+0x372/0x890 [ 1685.926021][T27878] __uprobe_register+0x404/0x8b0 [ 1685.930969][T27878] uprobe_register_refctr+0x29/0x40 [ 1685.936217][T27878] probe_event_enable+0x2be/0x7d0 [ 1685.941238][T27878] ? __uprobe_trace_func+0x440/0x440 [ 1685.946516][T27878] trace_uprobe_register+0x88/0x410 [ 1685.951789][T27878] perf_trace_event_init+0x34e/0x790 [ 1685.957069][T27878] perf_uprobe_init+0xf5/0x140 [ 1685.961835][T27878] perf_uprobe_event_init+0xde/0x140 [ 1685.967113][T27878] perf_try_init_event+0x21a/0x400 [ 1685.972209][T27878] perf_event_alloc+0xa60/0x1790 [ 1685.977129][T27878] __se_sys_perf_event_open+0x5db/0x2810 [ 1685.982746][T27878] ? proc_fail_nth_read+0x150/0x150 [ 1685.987982][T27878] __x64_sys_perf_event_open+0x63/0x70 [ 1685.993515][T27878] do_syscall_64+0x44/0xa0 [ 1685.997915][T27878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1686.003932][T27878] RIP: 0033:0x4665f9 [ 1686.007821][T27878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.027421][T27878] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1686.035822][T27878] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1686.043775][T27878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1686.051732][T27878] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x82000000, 0x0, 0x0, 0x0) 04:46:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x27000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1686.059733][T27878] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1686.067698][T27878] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:24 executing program 0 (fault-call:2 fault-nth:68): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x83000000, 0x0, 0x0, 0x0) [ 1686.111763][T27888] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1686.162806][T27894] FAULT_INJECTION: forcing a failure. [ 1686.162806][T27894] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.175474][T27894] CPU: 0 PID: 27894 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1686.183887][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.193972][T27894] Call Trace: [ 1686.197300][T27894] dump_stack_lvl+0xd6/0x122 [ 1686.201874][T27894] dump_stack+0x11/0x1b [ 1686.206024][T27894] should_fail+0x23c/0x250 [ 1686.210492][T27894] __should_failslab+0x81/0x90 [ 1686.215238][T27894] ? register_for_each_vma+0x372/0x890 [ 1686.220692][T27894] should_failslab+0x5/0x20 [ 1686.225181][T27894] kmem_cache_alloc_trace+0x52/0x320 [ 1686.230459][T27894] ? register_for_each_vma+0x372/0x890 [ 1686.235897][T27894] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1686.241871][T27894] register_for_each_vma+0x372/0x890 [ 1686.247143][T27894] __uprobe_register+0x404/0x8b0 [ 1686.252080][T27894] uprobe_register_refctr+0x29/0x40 [ 1686.257294][T27894] probe_event_enable+0x2be/0x7d0 [ 1686.262323][T27894] ? __uprobe_trace_func+0x440/0x440 [ 1686.267637][T27894] trace_uprobe_register+0x88/0x410 [ 1686.272822][T27894] perf_trace_event_init+0x34e/0x790 [ 1686.278098][T27894] perf_uprobe_init+0xf5/0x140 [ 1686.282856][T27894] perf_uprobe_event_init+0xde/0x140 [ 1686.288150][T27894] perf_try_init_event+0x21a/0x400 [ 1686.293300][T27894] perf_event_alloc+0xa60/0x1790 [ 1686.298236][T27894] __se_sys_perf_event_open+0x5db/0x2810 [ 1686.303945][T27894] ? proc_fail_nth_read+0x150/0x150 [ 1686.309164][T27894] __x64_sys_perf_event_open+0x63/0x70 [ 1686.314607][T27894] do_syscall_64+0x44/0xa0 [ 1686.319051][T27894] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1686.324936][T27894] RIP: 0033:0x4665f9 [ 1686.328819][T27894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.348482][T27894] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:25 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x84000000, 0x0, 0x0, 0x0) [ 1686.356880][T27894] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1686.364846][T27894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1686.372801][T27894] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.380759][T27894] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1686.388725][T27894] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x85000000, 0x0, 0x0, 0x0) [ 1686.414838][T27899] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 0 (fault-call:2 fault-nth:69): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1686.495018][T27913] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1686.519162][T27916] ================================================================== [ 1686.527254][T27916] BUG: KCSAN: data-race in io_clean_op / kiocb_done [ 1686.533839][T27916] [ 1686.536154][T27916] write to 0xffff888130cfe858 of 4 bytes by task 27914 on cpu 0: [ 1686.543858][T27916] io_clean_op+0x3aa/0x3e0 [ 1686.548257][T27916] io_req_task_complete+0xb2/0x1e0 [ 1686.553347][T27916] tctx_task_work+0x275/0x4d0 [ 1686.558002][T27916] task_work_run+0xae/0x130 [ 1686.562480][T27916] exit_to_user_mode_prepare+0xf8/0x190 [ 1686.568006][T27916] syscall_exit_to_user_mode+0x20/0x40 [ 1686.573441][T27916] do_syscall_64+0x50/0xa0 [ 1686.577834][T27916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1686.583722][T27916] [ 1686.586027][T27916] read to 0xffff888130cfe858 of 4 bytes by task 27916 on cpu 1: [ 1686.593647][T27916] kiocb_done+0x3be/0x650 [ 1686.597963][T27916] io_issue_sqe+0x3519/0x6590 [ 1686.602617][T27916] io_wq_submit_work+0xf5/0x2c0 [ 1686.607485][T27916] io_worker_handle_work+0x788/0xa20 [ 1686.612756][T27916] io_wqe_worker+0x1c9/0x5c0 [ 1686.617324][T27916] ret_from_fork+0x1f/0x30 [ 1686.621732][T27916] [ 1686.624031][T27916] value changed: 0x00182302 -> 0x00110102 [ 1686.629721][T27916] [ 1686.632024][T27916] Reported by Kernel Concurrency Sanitizer on: [ 1686.638161][T27916] CPU: 1 PID: 27916 Comm: iou-wrk-27914 Not tainted 5.14.0-syzkaller #0 [ 1686.646465][T27916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.656493][T27916] ================================================================== [ 1686.672603][T27922] FAULT_INJECTION: forcing a failure. [ 1686.672603][T27922] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.685402][T27922] CPU: 1 PID: 27922 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1686.693796][T27922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.703828][T27922] Call Trace: [ 1686.707088][T27922] dump_stack_lvl+0xd6/0x122 [ 1686.711731][T27922] dump_stack+0x11/0x1b [ 1686.715876][T27922] should_fail+0x23c/0x250 [ 1686.720329][T27922] __should_failslab+0x81/0x90 [ 1686.725073][T27922] ? register_for_each_vma+0x372/0x890 [ 1686.730558][T27922] should_failslab+0x5/0x20 [ 1686.735133][T27922] kmem_cache_alloc_trace+0x52/0x320 [ 1686.740415][T27922] ? register_for_each_vma+0x372/0x890 [ 1686.745926][T27922] ? vma_interval_tree_iter_next+0x263/0x280 [ 1686.751903][T27922] register_for_each_vma+0x372/0x890 [ 1686.757186][T27922] __uprobe_register+0x404/0x8b0 [ 1686.762185][T27922] uprobe_register_refctr+0x29/0x40 [ 1686.767364][T27922] probe_event_enable+0x2be/0x7d0 [ 1686.772382][T27922] ? __uprobe_trace_func+0x440/0x440 [ 1686.777747][T27922] trace_uprobe_register+0x88/0x410 [ 1686.782955][T27922] perf_trace_event_init+0x34e/0x790 [ 1686.788248][T27922] perf_uprobe_init+0xf5/0x140 [ 1686.793000][T27922] perf_uprobe_event_init+0xde/0x140 [ 1686.798292][T27922] perf_try_init_event+0x21a/0x400 [ 1686.803399][T27922] perf_event_alloc+0xa60/0x1790 [ 1686.808318][T27922] __se_sys_perf_event_open+0x5db/0x2810 [ 1686.814016][T27922] ? proc_fail_nth_read+0x150/0x150 [ 1686.819261][T27922] __x64_sys_perf_event_open+0x63/0x70 [ 1686.824713][T27922] do_syscall_64+0x44/0xa0 [ 1686.829117][T27922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1686.835004][T27922] RIP: 0033:0x4665f9 [ 1686.838884][T27922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.858558][T27922] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1686.866961][T27922] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1686.874923][T27922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1686.882893][T27922] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 04:46:25 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x86000000, 0x0, 0x0, 0x0) 04:46:25 executing program 0 (fault-call:2 fault-nth:70): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1686.890847][T27922] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1686.898814][T27922] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1686.925268][T27927] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:25 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x87000000, 0x0, 0x0, 0x0) 04:46:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1686.996930][T27939] FAULT_INJECTION: forcing a failure. [ 1686.996930][T27939] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.009577][T27939] CPU: 0 PID: 27939 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1687.017989][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.028036][T27939] Call Trace: [ 1687.031307][T27939] dump_stack_lvl+0xd6/0x122 [ 1687.035945][T27939] dump_stack+0x11/0x1b [ 1687.040101][T27939] should_fail+0x23c/0x250 [ 1687.044514][T27939] __should_failslab+0x81/0x90 [ 1687.049283][T27939] ? register_for_each_vma+0x372/0x890 [ 1687.054741][T27939] should_failslab+0x5/0x20 [ 1687.059838][T27939] kmem_cache_alloc_trace+0x52/0x320 [ 1687.065107][T27939] ? register_for_each_vma+0x372/0x890 [ 1687.070544][T27939] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1687.076504][T27939] register_for_each_vma+0x372/0x890 [ 1687.081780][T27939] __uprobe_register+0x404/0x8b0 [ 1687.086696][T27939] uprobe_register_refctr+0x29/0x40 [ 1687.091873][T27939] probe_event_enable+0x2be/0x7d0 [ 1687.096952][T27939] ? __uprobe_trace_func+0x440/0x440 [ 1687.102821][T27939] trace_uprobe_register+0x88/0x410 [ 1687.108179][T27939] perf_trace_event_init+0x34e/0x790 [ 1687.113469][T27939] perf_uprobe_init+0xf5/0x140 [ 1687.118220][T27939] perf_uprobe_event_init+0xde/0x140 [ 1687.123490][T27939] perf_try_init_event+0x21a/0x400 [ 1687.128605][T27939] perf_event_alloc+0xa60/0x1790 [ 1687.133557][T27939] __se_sys_perf_event_open+0x5db/0x2810 [ 1687.139243][T27939] ? proc_fail_nth_read+0x150/0x150 [ 1687.144434][T27939] __x64_sys_perf_event_open+0x63/0x70 [ 1687.149959][T27939] do_syscall_64+0x44/0xa0 [ 1687.154353][T27939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1687.160230][T27939] RIP: 0033:0x4665f9 [ 1687.164112][T27939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.183699][T27939] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:25 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x88000000, 0x0, 0x0, 0x0) [ 1687.192089][T27939] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1687.200097][T27939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1687.208049][T27939] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.216008][T27939] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1687.223954][T27939] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:25 executing program 0 (fault-call:2 fault-nth:71): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x89000000, 0x0, 0x0, 0x0) [ 1687.270576][T27951] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1687.316558][T27957] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1687.330853][T27956] FAULT_INJECTION: forcing a failure. [ 1687.330853][T27956] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.343538][T27956] CPU: 1 PID: 27956 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1687.351981][T27956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.362036][T27956] Call Trace: [ 1687.365308][T27956] dump_stack_lvl+0xd6/0x122 [ 1687.369896][T27956] dump_stack+0x11/0x1b [ 1687.374047][T27956] should_fail+0x23c/0x250 [ 1687.378521][T27956] __should_failslab+0x81/0x90 [ 1687.383296][T27956] ? register_for_each_vma+0x372/0x890 [ 1687.388751][T27956] should_failslab+0x5/0x20 [ 1687.393318][T27956] kmem_cache_alloc_trace+0x52/0x320 [ 1687.398711][T27956] ? register_for_each_vma+0x372/0x890 [ 1687.404167][T27956] ? vma_interval_tree_iter_next+0x263/0x280 [ 1687.410146][T27956] register_for_each_vma+0x372/0x890 [ 1687.415461][T27956] __uprobe_register+0x404/0x8b0 [ 1687.420379][T27956] uprobe_register_refctr+0x29/0x40 [ 1687.425555][T27956] probe_event_enable+0x2be/0x7d0 [ 1687.430579][T27956] ? __uprobe_trace_func+0x440/0x440 [ 1687.435914][T27956] trace_uprobe_register+0x88/0x410 [ 1687.441103][T27956] perf_trace_event_init+0x34e/0x790 [ 1687.446371][T27956] perf_uprobe_init+0xf5/0x140 [ 1687.451202][T27956] perf_uprobe_event_init+0xde/0x140 [ 1687.456471][T27956] perf_try_init_event+0x21a/0x400 [ 1687.461569][T27956] perf_event_alloc+0xa60/0x1790 [ 1687.466490][T27956] __se_sys_perf_event_open+0x5db/0x2810 [ 1687.472122][T27956] ? proc_fail_nth_read+0x150/0x150 [ 1687.477311][T27956] __x64_sys_perf_event_open+0x63/0x70 [ 1687.482749][T27956] do_syscall_64+0x44/0xa0 [ 1687.487168][T27956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1687.493069][T27956] RIP: 0033:0x4665f9 [ 1687.496938][T27956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:46:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8a000000, 0x0, 0x0, 0x0) 04:46:26 executing program 0 (fault-call:2 fault-nth:72): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1687.516704][T27956] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1687.525097][T27956] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1687.533045][T27956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1687.541009][T27956] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.548962][T27956] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1687.556916][T27956] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8b000000, 0x0, 0x0, 0x0) 04:46:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1687.626744][T27973] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1687.662016][T27976] FAULT_INJECTION: forcing a failure. [ 1687.662016][T27976] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.674776][T27976] CPU: 0 PID: 27976 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1687.683295][T27976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.693344][T27976] Call Trace: [ 1687.696617][T27976] dump_stack_lvl+0xd6/0x122 [ 1687.701212][T27976] dump_stack+0x11/0x1b [ 1687.705407][T27976] should_fail+0x23c/0x250 [ 1687.709818][T27976] __should_failslab+0x81/0x90 [ 1687.714613][T27976] ? register_for_each_vma+0x372/0x890 [ 1687.720121][T27976] should_failslab+0x5/0x20 [ 1687.724633][T27976] kmem_cache_alloc_trace+0x52/0x320 [ 1687.729902][T27976] ? register_for_each_vma+0x372/0x890 [ 1687.735337][T27976] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1687.741338][T27976] register_for_each_vma+0x372/0x890 [ 1687.746618][T27976] __uprobe_register+0x404/0x8b0 [ 1687.751547][T27976] uprobe_register_refctr+0x29/0x40 [ 1687.756740][T27976] probe_event_enable+0x2be/0x7d0 [ 1687.761742][T27976] ? __uprobe_trace_func+0x440/0x440 [ 1687.767044][T27976] trace_uprobe_register+0x88/0x410 [ 1687.772226][T27976] perf_trace_event_init+0x34e/0x790 [ 1687.777537][T27976] perf_uprobe_init+0xf5/0x140 [ 1687.782407][T27976] perf_uprobe_event_init+0xde/0x140 [ 1687.787694][T27976] perf_try_init_event+0x21a/0x400 [ 1687.792800][T27976] perf_event_alloc+0xa60/0x1790 [ 1687.797719][T27976] __se_sys_perf_event_open+0x5db/0x2810 [ 1687.803333][T27976] ? proc_fail_nth_read+0x150/0x150 [ 1687.808590][T27976] __x64_sys_perf_event_open+0x63/0x70 [ 1687.814039][T27976] do_syscall_64+0x44/0xa0 [ 1687.818448][T27976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1687.824326][T27976] RIP: 0033:0x4665f9 [ 1687.828206][T27976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.847788][T27976] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1687.856261][T27976] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1687.864210][T27976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 04:46:26 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8c000000, 0x0, 0x0, 0x0) 04:46:26 executing program 0 (fault-call:2 fault-nth:73): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1687.872203][T27976] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.880205][T27976] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1687.888154][T27976] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1687.934026][T27988] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1687.953263][T27994] FAULT_INJECTION: forcing a failure. [ 1687.953263][T27994] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.965982][T27994] CPU: 1 PID: 27994 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1687.974395][T27994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.984502][T27994] Call Trace: [ 1687.987762][T27994] dump_stack_lvl+0xd6/0x122 [ 1687.992331][T27994] dump_stack+0x11/0x1b [ 1687.996469][T27994] should_fail+0x23c/0x250 [ 1688.000862][T27994] __should_failslab+0x81/0x90 [ 1688.005601][T27994] ? register_for_each_vma+0x372/0x890 [ 1688.011038][T27994] should_failslab+0x5/0x20 [ 1688.015517][T27994] kmem_cache_alloc_trace+0x52/0x320 [ 1688.020781][T27994] ? register_for_each_vma+0x372/0x890 [ 1688.026283][T27994] ? vma_interval_tree_iter_next+0x263/0x280 [ 1688.032306][T27994] register_for_each_vma+0x372/0x890 [ 1688.037577][T27994] __uprobe_register+0x404/0x8b0 [ 1688.042495][T27994] uprobe_register_refctr+0x29/0x40 [ 1688.047685][T27994] probe_event_enable+0x2be/0x7d0 [ 1688.052686][T27994] ? __uprobe_trace_func+0x440/0x440 [ 1688.057954][T27994] trace_uprobe_register+0x88/0x410 [ 1688.063128][T27994] perf_trace_event_init+0x34e/0x790 [ 1688.068392][T27994] perf_uprobe_init+0xf5/0x140 [ 1688.073135][T27994] perf_uprobe_event_init+0xde/0x140 [ 1688.078480][T27994] perf_try_init_event+0x21a/0x400 [ 1688.083650][T27994] perf_event_alloc+0xa60/0x1790 [ 1688.088563][T27994] __se_sys_perf_event_open+0x5db/0x2810 [ 1688.094171][T27994] ? proc_fail_nth_read+0x150/0x150 [ 1688.099351][T27994] __x64_sys_perf_event_open+0x63/0x70 [ 1688.104793][T27994] do_syscall_64+0x44/0xa0 [ 1688.109237][T27994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1688.115110][T27994] RIP: 0033:0x4665f9 [ 1688.118981][T27994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.138561][T27994] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1688.146977][T27994] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1688.154930][T27994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1688.162877][T27994] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.170865][T27994] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8d000000, 0x0, 0x0, 0x0) [ 1688.178856][T27994] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:26 executing program 0 (fault-call:2 fault-nth:74): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1688.221113][T27999] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1688.273264][T28013] FAULT_INJECTION: forcing a failure. [ 1688.273264][T28013] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.285890][T28013] CPU: 0 PID: 28013 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1688.294302][T28013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.304344][T28013] Call Trace: [ 1688.307603][T28013] dump_stack_lvl+0xd6/0x122 [ 1688.312233][T28013] dump_stack+0x11/0x1b [ 1688.316365][T28013] should_fail+0x23c/0x250 [ 1688.320758][T28013] __should_failslab+0x81/0x90 [ 1688.325500][T28013] ? register_for_each_vma+0x372/0x890 [ 1688.330934][T28013] should_failslab+0x5/0x20 [ 1688.335495][T28013] kmem_cache_alloc_trace+0x52/0x320 [ 1688.340766][T28013] ? register_for_each_vma+0x372/0x890 [ 1688.346219][T28013] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1688.352188][T28013] register_for_each_vma+0x372/0x890 [ 1688.357466][T28013] __uprobe_register+0x404/0x8b0 [ 1688.362446][T28013] uprobe_register_refctr+0x29/0x40 [ 1688.367620][T28013] probe_event_enable+0x2be/0x7d0 [ 1688.372689][T28013] ? __uprobe_trace_func+0x440/0x440 [ 1688.377968][T28013] trace_uprobe_register+0x88/0x410 [ 1688.383141][T28013] perf_trace_event_init+0x34e/0x790 [ 1688.388423][T28013] perf_uprobe_init+0xf5/0x140 [ 1688.393223][T28013] perf_uprobe_event_init+0xde/0x140 [ 1688.398540][T28013] perf_try_init_event+0x21a/0x400 [ 1688.403710][T28013] perf_event_alloc+0xa60/0x1790 [ 1688.408627][T28013] __se_sys_perf_event_open+0x5db/0x2810 [ 1688.414291][T28013] ? proc_fail_nth_read+0x150/0x150 [ 1688.419512][T28013] __x64_sys_perf_event_open+0x63/0x70 [ 1688.425027][T28013] do_syscall_64+0x44/0xa0 [ 1688.429439][T28013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1688.435316][T28013] RIP: 0033:0x4665f9 [ 1688.439198][T28013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.458899][T28013] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8e000000, 0x0, 0x0, 0x0) [ 1688.467287][T28013] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1688.475234][T28013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1688.483231][T28013] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.491214][T28013] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1688.499177][T28013] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:27 executing program 0 (fault-call:2 fault-nth:75): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1688.514496][T28006] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1688.585701][T28024] FAULT_INJECTION: forcing a failure. [ 1688.585701][T28024] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.598355][T28024] CPU: 1 PID: 28024 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1688.606749][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.616787][T28024] Call Trace: [ 1688.620050][T28024] dump_stack_lvl+0xd6/0x122 [ 1688.624638][T28024] dump_stack+0x11/0x1b [ 1688.628798][T28024] should_fail+0x23c/0x250 [ 1688.633195][T28024] __should_failslab+0x81/0x90 [ 1688.638046][T28024] ? register_for_each_vma+0x372/0x890 [ 1688.643483][T28024] should_failslab+0x5/0x20 [ 1688.648106][T28024] kmem_cache_alloc_trace+0x52/0x320 [ 1688.653383][T28024] ? register_for_each_vma+0x372/0x890 [ 1688.658858][T28024] ? vma_interval_tree_iter_next+0x263/0x280 [ 1688.664871][T28024] register_for_each_vma+0x372/0x890 [ 1688.670150][T28024] __uprobe_register+0x404/0x8b0 [ 1688.675065][T28024] uprobe_register_refctr+0x29/0x40 [ 1688.680244][T28024] probe_event_enable+0x2be/0x7d0 [ 1688.685243][T28024] ? __uprobe_trace_func+0x440/0x440 [ 1688.690504][T28024] trace_uprobe_register+0x88/0x410 [ 1688.695690][T28024] perf_trace_event_init+0x34e/0x790 [ 1688.700953][T28024] perf_uprobe_init+0xf5/0x140 [ 1688.705738][T28024] perf_uprobe_event_init+0xde/0x140 [ 1688.711005][T28024] perf_try_init_event+0x21a/0x400 [ 1688.716096][T28024] perf_event_alloc+0xa60/0x1790 [ 1688.721018][T28024] __se_sys_perf_event_open+0x5db/0x2810 [ 1688.726626][T28024] ? proc_fail_nth_read+0x150/0x150 [ 1688.731806][T28024] __x64_sys_perf_event_open+0x63/0x70 [ 1688.737260][T28024] do_syscall_64+0x44/0xa0 [ 1688.741677][T28024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1688.747566][T28024] RIP: 0033:0x4665f9 [ 1688.751436][T28024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.771016][T28024] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x8f000000, 0x0, 0x0, 0x0) 04:46:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1688.779407][T28024] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1688.787355][T28024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1688.795328][T28024] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.803417][T28024] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1688.811381][T28024] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:27 executing program 0 (fault-call:2 fault-nth:76): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x90000000, 0x0, 0x0, 0x0) [ 1688.840367][T28026] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1688.897623][T28039] FAULT_INJECTION: forcing a failure. [ 1688.897623][T28039] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.910272][T28039] CPU: 0 PID: 28039 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1688.918682][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.928729][T28039] Call Trace: [ 1688.931998][T28039] dump_stack_lvl+0xd6/0x122 [ 1688.936585][T28039] dump_stack+0x11/0x1b [ 1688.940801][T28039] should_fail+0x23c/0x250 [ 1688.945217][T28039] __should_failslab+0x81/0x90 [ 1688.949975][T28039] ? register_for_each_vma+0x372/0x890 [ 1688.955428][T28039] should_failslab+0x5/0x20 [ 1688.959992][T28039] kmem_cache_alloc_trace+0x52/0x320 [ 1688.965332][T28039] ? register_for_each_vma+0x372/0x890 [ 1688.970768][T28039] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1688.976748][T28039] register_for_each_vma+0x372/0x890 [ 1688.982027][T28039] __uprobe_register+0x404/0x8b0 [ 1688.986959][T28039] uprobe_register_refctr+0x29/0x40 [ 1688.992221][T28039] probe_event_enable+0x2be/0x7d0 [ 1688.997239][T28039] ? __uprobe_trace_func+0x440/0x440 [ 1689.002653][T28039] trace_uprobe_register+0x88/0x410 [ 1689.007884][T28039] perf_trace_event_init+0x34e/0x790 [ 1689.013189][T28039] perf_uprobe_init+0xf5/0x140 [ 1689.018022][T28039] perf_uprobe_event_init+0xde/0x140 [ 1689.023366][T28039] perf_try_init_event+0x21a/0x400 [ 1689.028536][T28039] perf_event_alloc+0xa60/0x1790 [ 1689.033464][T28039] __se_sys_perf_event_open+0x5db/0x2810 [ 1689.039080][T28039] ? proc_fail_nth_read+0x150/0x150 [ 1689.044317][T28039] __x64_sys_perf_event_open+0x63/0x70 [ 1689.049778][T28039] do_syscall_64+0x44/0xa0 [ 1689.054195][T28039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1689.060140][T28039] RIP: 0033:0x4665f9 [ 1689.064043][T28039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.083704][T28039] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x91000000, 0x0, 0x0, 0x0) [ 1689.092186][T28039] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1689.100134][T28039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1689.108084][T28039] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.116116][T28039] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1689.124066][T28039] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 0 (fault-call:2 fault-nth:77): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.158255][T28045] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.222168][T28067] FAULT_INJECTION: forcing a failure. [ 1689.222168][T28067] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.234966][T28067] CPU: 1 PID: 28067 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1689.243505][T28067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.253552][T28067] Call Trace: [ 1689.256821][T28067] dump_stack_lvl+0xd6/0x122 [ 1689.261444][T28067] dump_stack+0x11/0x1b [ 1689.265581][T28067] should_fail+0x23c/0x250 [ 1689.269996][T28067] __should_failslab+0x81/0x90 [ 1689.274744][T28067] ? register_for_each_vma+0x372/0x890 [ 1689.280217][T28067] should_failslab+0x5/0x20 [ 1689.284713][T28067] kmem_cache_alloc_trace+0x52/0x320 [ 1689.290109][T28067] ? register_for_each_vma+0x372/0x890 [ 1689.295649][T28067] ? vma_interval_tree_iter_next+0x263/0x280 [ 1689.301608][T28067] register_for_each_vma+0x372/0x890 [ 1689.306952][T28067] __uprobe_register+0x404/0x8b0 [ 1689.311913][T28067] uprobe_register_refctr+0x29/0x40 [ 1689.317110][T28067] probe_event_enable+0x2be/0x7d0 [ 1689.322186][T28067] ? __uprobe_trace_func+0x440/0x440 [ 1689.327519][T28067] trace_uprobe_register+0x88/0x410 [ 1689.332692][T28067] perf_trace_event_init+0x34e/0x790 [ 1689.337992][T28067] perf_uprobe_init+0xf5/0x140 [ 1689.342750][T28067] perf_uprobe_event_init+0xde/0x140 [ 1689.348017][T28067] perf_try_init_event+0x21a/0x400 [ 1689.353111][T28067] perf_event_alloc+0xa60/0x1790 [ 1689.358026][T28067] __se_sys_perf_event_open+0x5db/0x2810 [ 1689.363673][T28067] ? proc_fail_nth_read+0x150/0x150 [ 1689.368873][T28067] __x64_sys_perf_event_open+0x63/0x70 [ 1689.374310][T28067] do_syscall_64+0x44/0xa0 [ 1689.378775][T28067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1689.384780][T28067] RIP: 0033:0x4665f9 [ 1689.388655][T28067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.408245][T28067] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x92000000, 0x0, 0x0, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.416837][T28067] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1689.424793][T28067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1689.432792][T28067] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.440747][T28067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1689.448702][T28067] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:28 executing program 0 (fault-call:2 fault-nth:78): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.473639][T28069] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.552076][T28090] FAULT_INJECTION: forcing a failure. [ 1689.552076][T28090] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.564718][T28090] CPU: 1 PID: 28090 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1689.573359][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.583411][T28090] Call Trace: [ 1689.586685][T28090] dump_stack_lvl+0xd6/0x122 [ 1689.591282][T28090] dump_stack+0x11/0x1b [ 1689.595545][T28090] should_fail+0x23c/0x250 [ 1689.599942][T28090] __should_failslab+0x81/0x90 [ 1689.604838][T28090] ? register_for_each_vma+0x372/0x890 [ 1689.610282][T28090] should_failslab+0x5/0x20 [ 1689.614765][T28090] kmem_cache_alloc_trace+0x52/0x320 [ 1689.620031][T28090] ? register_for_each_vma+0x372/0x890 [ 1689.625473][T28090] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1689.631499][T28090] register_for_each_vma+0x372/0x890 [ 1689.636813][T28090] __uprobe_register+0x404/0x8b0 [ 1689.641729][T28090] uprobe_register_refctr+0x29/0x40 [ 1689.646914][T28090] probe_event_enable+0x2be/0x7d0 [ 1689.651923][T28090] ? __uprobe_trace_func+0x440/0x440 [ 1689.657247][T28090] trace_uprobe_register+0x88/0x410 [ 1689.662451][T28090] perf_trace_event_init+0x34e/0x790 [ 1689.667729][T28090] perf_uprobe_init+0xf5/0x140 [ 1689.672511][T28090] perf_uprobe_event_init+0xde/0x140 [ 1689.677809][T28090] perf_try_init_event+0x21a/0x400 [ 1689.682969][T28090] perf_event_alloc+0xa60/0x1790 [ 1689.687959][T28090] __se_sys_perf_event_open+0x5db/0x2810 [ 1689.693594][T28090] ? proc_fail_nth_read+0x150/0x150 [ 1689.698797][T28090] __x64_sys_perf_event_open+0x63/0x70 [ 1689.704305][T28090] do_syscall_64+0x44/0xa0 [ 1689.708803][T28090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1689.714681][T28090] RIP: 0033:0x4665f9 [ 1689.718573][T28090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.738159][T28090] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x93000000, 0x0, 0x0, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.746726][T28090] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1689.754678][T28090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1689.762629][T28090] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.770579][T28090] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1689.778635][T28090] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:28 executing program 0 (fault-call:2 fault-nth:79): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x80510100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1689.811419][T28093] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1689.873266][T28111] FAULT_INJECTION: forcing a failure. [ 1689.873266][T28111] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.885931][T28111] CPU: 0 PID: 28111 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1689.894418][T28111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.904463][T28111] Call Trace: [ 1689.907729][T28111] dump_stack_lvl+0xd6/0x122 [ 1689.912317][T28111] dump_stack+0x11/0x1b [ 1689.916512][T28111] should_fail+0x23c/0x250 [ 1689.920905][T28111] __should_failslab+0x81/0x90 [ 1689.925644][T28111] ? register_for_each_vma+0x372/0x890 [ 1689.931141][T28111] should_failslab+0x5/0x20 [ 1689.935707][T28111] kmem_cache_alloc_trace+0x52/0x320 [ 1689.941019][T28111] ? register_for_each_vma+0x372/0x890 [ 1689.946804][T28111] ? vma_interval_tree_iter_next+0x263/0x280 [ 1689.952824][T28111] register_for_each_vma+0x372/0x890 [ 1689.958087][T28111] __uprobe_register+0x404/0x8b0 [ 1689.963000][T28111] uprobe_register_refctr+0x29/0x40 [ 1689.968184][T28111] probe_event_enable+0x2be/0x7d0 [ 1689.973184][T28111] ? __uprobe_trace_func+0x440/0x440 [ 1689.978744][T28111] trace_uprobe_register+0x88/0x410 [ 1689.983980][T28111] perf_trace_event_init+0x34e/0x790 [ 1689.989241][T28111] perf_uprobe_init+0xf5/0x140 [ 1689.993998][T28111] perf_uprobe_event_init+0xde/0x140 [ 1689.999345][T28111] perf_try_init_event+0x21a/0x400 [ 1690.004448][T28111] perf_event_alloc+0xa60/0x1790 [ 1690.009362][T28111] __se_sys_perf_event_open+0x5db/0x2810 [ 1690.015041][T28111] ? proc_fail_nth_read+0x150/0x150 [ 1690.020246][T28111] __x64_sys_perf_event_open+0x63/0x70 [ 1690.025700][T28111] do_syscall_64+0x44/0xa0 [ 1690.030153][T28111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1690.036061][T28111] RIP: 0033:0x4665f9 [ 1690.039942][T28111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.059533][T28111] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:28 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x94000000, 0x0, 0x0, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.067918][T28111] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1690.075868][T28111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1690.083818][T28111] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.091787][T28111] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1690.099732][T28111] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x95000000, 0x0, 0x0, 0x0) [ 1690.129359][T28118] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:28 executing program 0 (fault-call:2 fault-nth:80): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.244861][T28142] FAULT_INJECTION: forcing a failure. [ 1690.244861][T28142] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.257509][T28142] CPU: 0 PID: 28142 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1690.265912][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.276002][T28142] Call Trace: [ 1690.279700][T28142] dump_stack_lvl+0xd6/0x122 [ 1690.284283][T28142] dump_stack+0x11/0x1b [ 1690.288488][T28142] should_fail+0x23c/0x250 [ 1690.292891][T28142] __should_failslab+0x81/0x90 [ 1690.297646][T28142] ? register_for_each_vma+0x372/0x890 [ 1690.303090][T28142] should_failslab+0x5/0x20 [ 1690.307584][T28142] kmem_cache_alloc_trace+0x52/0x320 [ 1690.312860][T28142] ? register_for_each_vma+0x372/0x890 [ 1690.318393][T28142] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1690.324376][T28142] register_for_each_vma+0x372/0x890 [ 1690.329658][T28142] __uprobe_register+0x404/0x8b0 [ 1690.334576][T28142] uprobe_register_refctr+0x29/0x40 [ 1690.339877][T28142] probe_event_enable+0x2be/0x7d0 [ 1690.344874][T28142] ? __uprobe_trace_func+0x440/0x440 [ 1690.350144][T28142] trace_uprobe_register+0x88/0x410 [ 1690.355317][T28142] perf_trace_event_init+0x34e/0x790 [ 1690.360600][T28142] perf_uprobe_init+0xf5/0x140 [ 1690.365353][T28142] perf_uprobe_event_init+0xde/0x140 [ 1690.370688][T28142] perf_try_init_event+0x21a/0x400 [ 1690.375778][T28142] perf_event_alloc+0xa60/0x1790 [ 1690.380769][T28142] __se_sys_perf_event_open+0x5db/0x2810 [ 1690.386472][T28142] ? proc_fail_nth_read+0x150/0x150 [ 1690.391652][T28142] __x64_sys_perf_event_open+0x63/0x70 [ 1690.397111][T28142] do_syscall_64+0x44/0xa0 [ 1690.401586][T28142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1690.407462][T28142] RIP: 0033:0x4665f9 [ 1690.411327][T28142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.430912][T28142] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:29 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x96000000, 0x0, 0x0, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.439359][T28142] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1690.447330][T28142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1690.455357][T28142] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.463401][T28142] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1690.471362][T28142] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 [ 1690.490301][T28139] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1690.535100][T28160] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 0 (fault-call:2 fault-nth:81): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x97000000, 0x0, 0x0, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.608078][T28168] FAULT_INJECTION: forcing a failure. [ 1690.608078][T28168] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.620730][T28168] CPU: 0 PID: 28168 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1690.629132][T28168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.639171][T28168] Call Trace: [ 1690.642517][T28168] dump_stack_lvl+0xd6/0x122 [ 1690.647146][T28168] dump_stack+0x11/0x1b [ 1690.651293][T28168] should_fail+0x23c/0x250 [ 1690.655765][T28168] __should_failslab+0x81/0x90 [ 1690.660589][T28168] ? register_for_each_vma+0x372/0x890 [ 1690.666102][T28168] should_failslab+0x5/0x20 [ 1690.670604][T28168] kmem_cache_alloc_trace+0x52/0x320 [ 1690.675862][T28168] ? register_for_each_vma+0x372/0x890 [ 1690.681359][T28168] ? vma_interval_tree_iter_next+0x263/0x280 [ 1690.687319][T28168] register_for_each_vma+0x372/0x890 [ 1690.692592][T28168] __uprobe_register+0x404/0x8b0 [ 1690.697551][T28168] uprobe_register_refctr+0x29/0x40 [ 1690.702764][T28168] probe_event_enable+0x2be/0x7d0 [ 1690.707789][T28168] ? __uprobe_trace_func+0x440/0x440 [ 1690.713051][T28168] trace_uprobe_register+0x88/0x410 [ 1690.718247][T28168] perf_trace_event_init+0x34e/0x790 [ 1690.723579][T28168] perf_uprobe_init+0xf5/0x140 [ 1690.728391][T28168] perf_uprobe_event_init+0xde/0x140 [ 1690.733657][T28168] perf_try_init_event+0x21a/0x400 [ 1690.738903][T28168] perf_event_alloc+0xa60/0x1790 [ 1690.743868][T28168] __se_sys_perf_event_open+0x5db/0x2810 [ 1690.749687][T28168] ? proc_fail_nth_read+0x150/0x150 [ 1690.754891][T28168] __x64_sys_perf_event_open+0x63/0x70 [ 1690.760337][T28168] do_syscall_64+0x44/0xa0 [ 1690.764738][T28168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1690.770618][T28168] RIP: 0033:0x4665f9 [ 1690.774505][T28168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.794534][T28168] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:29 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x98000000, 0x0, 0x0, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.802942][T28168] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1690.810898][T28168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1690.818861][T28168] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.827072][T28168] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1690.835102][T28168] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 0 (fault-call:2 fault-nth:82): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1690.855803][T28174] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1690.885737][T28189] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1690.930867][T28194] FAULT_INJECTION: forcing a failure. [ 1690.930867][T28194] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.943469][T28194] CPU: 1 PID: 28194 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1690.951856][T28194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.961883][T28194] Call Trace: [ 1690.965136][T28194] dump_stack_lvl+0xd6/0x122 [ 1690.969776][T28194] dump_stack+0x11/0x1b [ 1690.973907][T28194] should_fail+0x23c/0x250 [ 1690.978302][T28194] __should_failslab+0x81/0x90 [ 1690.983120][T28194] ? register_for_each_vma+0x372/0x890 [ 1690.988563][T28194] should_failslab+0x5/0x20 [ 1690.993100][T28194] kmem_cache_alloc_trace+0x52/0x320 [ 1690.998367][T28194] ? register_for_each_vma+0x372/0x890 [ 1691.003827][T28194] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1691.009799][T28194] register_for_each_vma+0x372/0x890 [ 1691.015126][T28194] __uprobe_register+0x404/0x8b0 [ 1691.020113][T28194] uprobe_register_refctr+0x29/0x40 [ 1691.025386][T28194] probe_event_enable+0x2be/0x7d0 [ 1691.030390][T28194] ? __uprobe_trace_func+0x440/0x440 [ 1691.035688][T28194] trace_uprobe_register+0x88/0x410 [ 1691.040957][T28194] perf_trace_event_init+0x34e/0x790 [ 1691.046221][T28194] perf_uprobe_init+0xf5/0x140 [ 1691.051064][T28194] perf_uprobe_event_init+0xde/0x140 [ 1691.056332][T28194] perf_try_init_event+0x21a/0x400 [ 1691.061446][T28194] perf_event_alloc+0xa60/0x1790 [ 1691.066362][T28194] __se_sys_perf_event_open+0x5db/0x2810 [ 1691.072019][T28194] ? proc_fail_nth_read+0x150/0x150 [ 1691.077197][T28194] __x64_sys_perf_event_open+0x63/0x70 [ 1691.082660][T28194] do_syscall_64+0x44/0xa0 [ 1691.087136][T28194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.093067][T28194] RIP: 0033:0x4665f9 [ 1691.096934][T28194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.116805][T28194] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x99000000, 0x0, 0x0, 0x0) 04:46:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1691.125286][T28194] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1691.133244][T28194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1691.141200][T28194] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.149233][T28194] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1691.157217][T28194] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 0 (fault-call:2 fault-nth:83): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:29 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9a000000, 0x0, 0x0, 0x0) [ 1691.243075][T28206] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1691.258044][T28215] FAULT_INJECTION: forcing a failure. [ 1691.258044][T28215] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.270678][T28215] CPU: 0 PID: 28215 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1691.279082][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1691.289118][T28215] Call Trace: [ 1691.292383][T28215] dump_stack_lvl+0xd6/0x122 [ 1691.296975][T28215] dump_stack+0x11/0x1b [ 1691.301144][T28215] should_fail+0x23c/0x250 [ 1691.305566][T28215] __should_failslab+0x81/0x90 [ 1691.310314][T28215] ? register_for_each_vma+0x372/0x890 [ 1691.315820][T28215] should_failslab+0x5/0x20 [ 1691.320343][T28215] kmem_cache_alloc_trace+0x52/0x320 [ 1691.325614][T28215] ? register_for_each_vma+0x372/0x890 [ 1691.331060][T28215] ? vma_interval_tree_iter_next+0x263/0x280 [ 1691.337192][T28215] register_for_each_vma+0x372/0x890 [ 1691.342460][T28215] __uprobe_register+0x404/0x8b0 [ 1691.347393][T28215] uprobe_register_refctr+0x29/0x40 [ 1691.352570][T28215] probe_event_enable+0x2be/0x7d0 [ 1691.357575][T28215] ? __uprobe_trace_func+0x440/0x440 [ 1691.362836][T28215] trace_uprobe_register+0x88/0x410 [ 1691.368016][T28215] perf_trace_event_init+0x34e/0x790 [ 1691.373298][T28215] perf_uprobe_init+0xf5/0x140 [ 1691.378068][T28215] perf_uprobe_event_init+0xde/0x140 [ 1691.383334][T28215] perf_try_init_event+0x21a/0x400 [ 1691.388582][T28215] perf_event_alloc+0xa60/0x1790 [ 1691.393499][T28215] __se_sys_perf_event_open+0x5db/0x2810 [ 1691.399108][T28215] ? proc_fail_nth_read+0x150/0x150 [ 1691.404367][T28215] ? save_fpregs_to_fpstate+0xd8/0x110 [ 1691.409805][T28215] __x64_sys_perf_event_open+0x63/0x70 [ 1691.415320][T28215] do_syscall_64+0x44/0xa0 [ 1691.419763][T28215] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.425708][T28215] RIP: 0033:0x4665f9 [ 1691.429583][T28215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.449168][T28215] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1691.457622][T28215] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1691.465570][T28215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1691.473522][T28215] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.481478][T28215] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1691.489456][T28215] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9b000000, 0x0, 0x0, 0x0) 04:46:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9c000000, 0x0, 0x0, 0x0) [ 1691.557144][T28219] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 0 (fault-call:2 fault-nth:84): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1691.649398][T28251] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1691.666288][T28253] FAULT_INJECTION: forcing a failure. [ 1691.666288][T28253] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.678916][T28253] CPU: 1 PID: 28253 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1691.687316][T28253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1691.697370][T28253] Call Trace: [ 1691.700630][T28253] dump_stack_lvl+0xd6/0x122 [ 1691.705201][T28253] dump_stack+0x11/0x1b [ 1691.709352][T28253] should_fail+0x23c/0x250 [ 1691.713755][T28253] __should_failslab+0x81/0x90 [ 1691.718514][T28253] ? register_for_each_vma+0x372/0x890 [ 1691.723996][T28253] should_failslab+0x5/0x20 [ 1691.728514][T28253] kmem_cache_alloc_trace+0x52/0x320 [ 1691.733809][T28253] ? register_for_each_vma+0x372/0x890 [ 1691.739299][T28253] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1691.745313][T28253] register_for_each_vma+0x372/0x890 [ 1691.750630][T28253] __uprobe_register+0x404/0x8b0 [ 1691.755557][T28253] uprobe_register_refctr+0x29/0x40 [ 1691.760817][T28253] probe_event_enable+0x2be/0x7d0 [ 1691.765828][T28253] ? __uprobe_trace_func+0x440/0x440 [ 1691.771113][T28253] trace_uprobe_register+0x88/0x410 [ 1691.776294][T28253] perf_trace_event_init+0x34e/0x790 [ 1691.781567][T28253] perf_uprobe_init+0xf5/0x140 [ 1691.786318][T28253] perf_uprobe_event_init+0xde/0x140 [ 1691.791591][T28253] perf_try_init_event+0x21a/0x400 [ 1691.796684][T28253] perf_event_alloc+0xa60/0x1790 [ 1691.801615][T28253] __se_sys_perf_event_open+0x5db/0x2810 [ 1691.807274][T28253] ? proc_fail_nth_read+0x150/0x150 [ 1691.812456][T28253] __x64_sys_perf_event_open+0x63/0x70 [ 1691.817910][T28253] do_syscall_64+0x44/0xa0 [ 1691.822304][T28253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.828243][T28253] RIP: 0033:0x4665f9 04:46:30 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9d000000, 0x0, 0x0, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1691.832196][T28253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.851782][T28253] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1691.860174][T28253] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1691.868180][T28253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1691.876129][T28253] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.884151][T28253] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1691.892149][T28253] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1691.921825][T28257] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:30 executing program 0 (fault-call:2 fault-nth:85): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9e000000, 0x0, 0x0, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.018672][T28273] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1692.032346][T28276] FAULT_INJECTION: forcing a failure. [ 1692.032346][T28276] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.045017][T28276] CPU: 0 PID: 28276 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1692.053426][T28276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.063470][T28276] Call Trace: [ 1692.066743][T28276] dump_stack_lvl+0xd6/0x122 [ 1692.071318][T28276] dump_stack+0x11/0x1b [ 1692.075488][T28276] should_fail+0x23c/0x250 [ 1692.080237][T28276] __should_failslab+0x81/0x90 [ 1692.085036][T28276] ? register_for_each_vma+0x372/0x890 [ 1692.090477][T28276] should_failslab+0x5/0x20 [ 1692.094960][T28276] kmem_cache_alloc_trace+0x52/0x320 [ 1692.100233][T28276] ? register_for_each_vma+0x372/0x890 [ 1692.105668][T28276] ? vma_interval_tree_iter_next+0x263/0x280 [ 1692.111629][T28276] register_for_each_vma+0x372/0x890 [ 1692.116952][T28276] __uprobe_register+0x404/0x8b0 [ 1692.121868][T28276] uprobe_register_refctr+0x29/0x40 [ 1692.127091][T28276] probe_event_enable+0x2be/0x7d0 [ 1692.132097][T28276] ? __uprobe_trace_func+0x440/0x440 [ 1692.137374][T28276] trace_uprobe_register+0x88/0x410 [ 1692.142558][T28276] perf_trace_event_init+0x34e/0x790 [ 1692.147893][T28276] perf_uprobe_init+0xf5/0x140 [ 1692.152776][T28276] perf_uprobe_event_init+0xde/0x140 [ 1692.158048][T28276] perf_try_init_event+0x21a/0x400 [ 1692.163153][T28276] perf_event_alloc+0xa60/0x1790 [ 1692.168081][T28276] __se_sys_perf_event_open+0x5db/0x2810 [ 1692.173736][T28276] ? proc_fail_nth_read+0x150/0x150 [ 1692.179024][T28276] __x64_sys_perf_event_open+0x63/0x70 [ 1692.184469][T28276] do_syscall_64+0x44/0xa0 [ 1692.188912][T28276] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.194792][T28276] RIP: 0033:0x4665f9 [ 1692.198715][T28276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:46:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x10000010000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:30 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x9f000000, 0x0, 0x0, 0x0) [ 1692.218300][T28276] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1692.226728][T28276] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1692.234677][T28276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1692.242623][T28276] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1692.250581][T28276] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1692.258530][T28276] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.286612][T28285] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:31 executing program 0 (fault-call:2 fault-nth:86): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x40000100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa0000000, 0x0, 0x0, 0x0) 04:46:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.380040][T28302] FAULT_INJECTION: forcing a failure. [ 1692.380040][T28302] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.392714][T28302] CPU: 1 PID: 28302 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1692.401201][T28302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.411249][T28302] Call Trace: [ 1692.414598][T28302] dump_stack_lvl+0xd6/0x122 [ 1692.419238][T28302] dump_stack+0x11/0x1b [ 1692.423369][T28302] should_fail+0x23c/0x250 [ 1692.427761][T28302] __should_failslab+0x81/0x90 [ 1692.432546][T28302] ? register_for_each_vma+0x372/0x890 [ 1692.437983][T28302] should_failslab+0x5/0x20 [ 1692.442467][T28302] kmem_cache_alloc_trace+0x52/0x320 [ 1692.447823][T28302] ? register_for_each_vma+0x372/0x890 [ 1692.453262][T28302] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1692.459342][T28302] register_for_each_vma+0x372/0x890 [ 1692.464684][T28302] __uprobe_register+0x404/0x8b0 [ 1692.469613][T28302] uprobe_register_refctr+0x29/0x40 [ 1692.474806][T28302] probe_event_enable+0x2be/0x7d0 [ 1692.480255][T28302] ? __uprobe_trace_func+0x440/0x440 [ 1692.485523][T28302] trace_uprobe_register+0x88/0x410 [ 1692.490698][T28302] perf_trace_event_init+0x34e/0x790 [ 1692.495980][T28302] perf_uprobe_init+0xf5/0x140 [ 1692.500777][T28302] perf_uprobe_event_init+0xde/0x140 [ 1692.506061][T28302] perf_try_init_event+0x21a/0x400 [ 1692.511152][T28302] perf_event_alloc+0xa60/0x1790 [ 1692.516090][T28302] __se_sys_perf_event_open+0x5db/0x2810 [ 1692.521791][T28302] ? proc_fail_nth_read+0x150/0x150 [ 1692.526985][T28302] __x64_sys_perf_event_open+0x63/0x70 [ 1692.532460][T28302] do_syscall_64+0x44/0xa0 [ 1692.536855][T28302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.542737][T28302] RIP: 0033:0x4665f9 [ 1692.546611][T28302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1692.566240][T28302] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa1000000, 0x0, 0x0, 0x0) [ 1692.574679][T28302] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1692.582630][T28302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1692.590590][T28302] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1692.598550][T28302] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1692.606496][T28302] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:31 executing program 0 (fault-call:2 fault-nth:87): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa2000000, 0x0, 0x0, 0x0) 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.635652][T28313] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.714533][T28328] FAULT_INJECTION: forcing a failure. [ 1692.714533][T28328] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.727198][T28328] CPU: 0 PID: 28328 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1692.735643][T28328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.745723][T28328] Call Trace: [ 1692.749010][T28328] dump_stack_lvl+0xd6/0x122 [ 1692.753643][T28328] dump_stack+0x11/0x1b [ 1692.757793][T28328] should_fail+0x23c/0x250 [ 1692.762200][T28328] __should_failslab+0x81/0x90 [ 1692.766960][T28328] ? register_for_each_vma+0x372/0x890 [ 1692.772424][T28328] should_failslab+0x5/0x20 [ 1692.776917][T28328] kmem_cache_alloc_trace+0x52/0x320 [ 1692.782705][T28328] ? register_for_each_vma+0x372/0x890 [ 1692.788143][T28328] ? vma_interval_tree_iter_next+0x263/0x280 [ 1692.794132][T28328] register_for_each_vma+0x372/0x890 [ 1692.799435][T28328] __uprobe_register+0x404/0x8b0 [ 1692.804358][T28328] uprobe_register_refctr+0x29/0x40 [ 1692.809571][T28328] probe_event_enable+0x2be/0x7d0 [ 1692.814573][T28328] ? __uprobe_trace_func+0x440/0x440 [ 1692.819837][T28328] trace_uprobe_register+0x88/0x410 [ 1692.825012][T28328] perf_trace_event_init+0x34e/0x790 [ 1692.830354][T28328] perf_uprobe_init+0xf5/0x140 [ 1692.835168][T28328] perf_uprobe_event_init+0xde/0x140 [ 1692.840438][T28328] perf_try_init_event+0x21a/0x400 [ 1692.845605][T28328] perf_event_alloc+0xa60/0x1790 [ 1692.850541][T28328] __se_sys_perf_event_open+0x5db/0x2810 [ 1692.856167][T28328] ? proc_fail_nth_read+0x150/0x150 [ 1692.861446][T28328] __x64_sys_perf_event_open+0x63/0x70 [ 1692.866887][T28328] do_syscall_64+0x44/0xa0 [ 1692.871316][T28328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.877204][T28328] RIP: 0033:0x4665f9 [ 1692.881082][T28328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1692.900662][T28328] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa3000000, 0x0, 0x0, 0x0) [ 1692.909137][T28328] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1692.917095][T28328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1692.925062][T28328] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1692.933058][T28328] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1692.941011][T28328] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:31 executing program 0 (fault-call:2 fault-nth:88): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.967771][T28339] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa4000000, 0x0, 0x0, 0x0) 04:46:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1693.015450][T28341] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 1693.056276][T28351] FAULT_INJECTION: forcing a failure. [ 1693.056276][T28351] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.068975][T28351] CPU: 0 PID: 28351 Comm: syz-executor.0 Not tainted 5.14.0-syzkaller #0 [ 1693.077385][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1693.087536][T28351] Call Trace: [ 1693.090805][T28351] dump_stack_lvl+0xd6/0x122 [ 1693.095395][T28351] dump_stack+0x11/0x1b [ 1693.099602][T28351] should_fail+0x23c/0x250 [ 1693.104064][T28351] __should_failslab+0x81/0x90 [ 1693.108850][T28351] ? register_for_each_vma+0x372/0x890 [ 1693.114301][T28351] should_failslab+0x5/0x20 [ 1693.118798][T28351] kmem_cache_alloc_trace+0x52/0x320 [ 1693.124082][T28351] ? register_for_each_vma+0x372/0x890 [ 1693.129537][T28351] ? vma_interval_tree_iter_next+0x24c/0x280 [ 1693.135526][T28351] register_for_each_vma+0x372/0x890 [ 1693.140811][T28351] __uprobe_register+0x404/0x8b0 [ 1693.145754][T28351] uprobe_register_refctr+0x29/0x40 [ 1693.150969][T28351] probe_event_enable+0x2be/0x7d0 [ 1693.155989][T28351] ? __uprobe_trace_func+0x440/0x440 [ 1693.161297][T28351] trace_uprobe_register+0x88/0x410 [ 1693.166471][T28351] perf_trace_event_init+0x34e/0x790 [ 1693.171742][T28351] perf_uprobe_init+0xf5/0x140 [ 1693.176488][T28351] perf_uprobe_event_init+0xde/0x140 [ 1693.181795][T28351] perf_try_init_event+0x21a/0x400 [ 1693.186933][T28351] perf_event_alloc+0xa60/0x1790 [ 1693.191901][T28351] __se_sys_perf_event_open+0x5db/0x2810 [ 1693.197516][T28351] ? proc_fail_nth_read+0x150/0x150 [ 1693.202819][T28351] __x64_sys_perf_event_open+0x63/0x70 [ 1693.208259][T28351] do_syscall_64+0x44/0xa0 [ 1693.212666][T28351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1693.218547][T28351] RIP: 0033:0x4665f9 [ 1693.222432][T28351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1693.242015][T28351] RSP: 002b:00007f84ef935188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 04:46:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:32 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa5000000, 0x0, 0x0, 0x0) [ 1693.250423][T28351] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1693.258378][T28351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1693.266343][T28351] RBP: 00007f84ef9351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1693.274300][T28351] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1693.282249][T28351] R13: 00007ffcc1e2444f R14: 00007f84ef935300 R15: 0000000000022000 04:46:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:32 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000880), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0xa6000000, 0x0, 0x0, 0x0) 04:46:32 executing program 0 (fault-call:2 fault-nth:89): set_mempolicy(0x1, &(0x7f0000000040)=0x5, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1693.313351][T28358] ref_ctr_offset mismatch. inode: 0x361d offset: 0xdc16 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 04:46:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:46:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1693.404546][T28380]