0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x88}, 0x20000000) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ppoll(&(0x7f0000002480)=[{r4}], 0x1, &(0x7f00000024c0)={0x0, 0x989680}, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0xfffd, 0x8000}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4000, 0x7}, 0x4) dup3(r1, r3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x11, r5, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) sendmmsg$inet6(r2, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001240)="b7be59b665164630dcfc810a1e7af4f49c0f2db6b37aacd1434434bf269785fc76ce86c0e4f3dded04ee308f4ae4bd4ac99e0d531b188bfd4d8e3948cd804d5693bdc8c8c8f885b036fd82bb97297e0d3d08cde611ad23974d8a0a3eab66012d1e2f7c0ee6d98610a7e2511e3a3e903bdc04c212fd3c4742a7d7ba36310459eab90d9af7678a", 0x86}, {&(0x7f0000001300)="c87060bec9b976183c1f205c785142070342f81e9052806e733af4fe6150fd4faf58832f2d5335c5468e3337e1cf310b8e90efeda9d293b137c573f9ce7a1fc2eab8aebfb5f98342a2c0e118c7d82a6e151efaf8367194df1bececdc733ba3bd", 0x60}, {&(0x7f0000001380)="5b0860af62cb986555229c9f6cfae0a1942e90d4fb6c388d0ac44d7fdd99b28e3f792882524504533037b04c553f880cd8fccced7f555d42f4c12f0530036d7b69e71f6202bb31ff44d9bb162c25afe34d23c6549fe78ba17ceb08e5f044a02b4ea8b70c334f6b673ddb2d20b741d72f15c9d195dc52", 0x76}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000001400)="6c61ce01e7f2936acdeeb9b2b1bc9bc52699c8a84de342db5f47dba9d1a5b22cb2ade0c9b0aac72b2f3478e454d4558039cb38b188362b32168759dc2f5b09b8c79aef81a2b8551db0700eecb1f6ea1d496232e60f6e6dfb5c60b6886cf4e0f8b6c69eb133a548e7272eb12ef9c5749c9c4cf9c6bc95aad4c71dcbbbd97afc94d23944922b8ceba198", 0x89}, {&(0x7f0000001540)="ce19da635a866d52a00e79658affac71b32385cfee2cece6a639342b66e4adae01c0c16de4e9ae07f8001da6658352549f956b2d33e4dca2d2f9cd038de7e95679b56ef53152ccf9077779a20a9ada9fe334b8301d236cf4e7f9a0354721847baa37d3093f92af32afd3041e974380733843c1d72230b2534ee28f1a8c398933e23a0af3c1161b0eb0aca253c1f5304d6d9de0e7ef2630024f8313e31d03696ce6fef0abeb8f179aa581b5ae31d928f80f55e18d7ca6efec415f9363", 0xbc}, {&(0x7f0000001600)="d20a692678dde8693aafca20b0a88341a31e7afbae33d9df2f770958f1eb2dcf9f982f575e349dc46f94a5ff6a24991612331394e39d923c2d261b58e956dd2aa05a4d7e4933d15ea90ee3b89fb718413ecffd0cb7080624e15751aa79da8829ea5af77134e3c946e37cacfbdce6926af2ea536fb17df6ccbad807e334a6f962b82b3235eb41dcab94b4427349d792e922d2c82d3a706cc5999286fcb8e19e93a3", 0xa1}, {&(0x7f00000016c0)="eed7032856a107daddc8e1eb6b1deaf47b33eb4b51aa159175def2c1ebac20e19b500af62fa96aaa4e14355de057b05babee61535e173e2ced7e85b2414c8b644fbf2c2e7ec43b4b6bddde9518bd319724130be676b304a9b60edccdaac76986d6e5a1fa6a2c48428539ee1bbfce2cf393d9abea512d4234ee9f6136f260b93f2148fb822d12b9e5b839c6d6a1454b5b0a0c14", 0x93}, {&(0x7f00000014c0)="5cd12e9e9d7d6ae68893ceaed543c463524e6f70b0b95afc64", 0x19}], 0x9}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x40, @empty, 0x8b}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001880)="df3bf028fb827b7988c593220b98c063b85eef0bfe77bc884f82dbaa5272b53b3228c60725856ed720a0e30cd28f4fb83bac2b87c0debf65a70beb87b78e0f46c70d69821ac4eacf8fd53241c17590ec2cde58d964e1f24452c7bcf6f831476181174d147f2dadc829776d3836fe8cd796c5a68dfebb5b5ad691e036875924967604bb82722b2116776471928d625a3f4f913bd7b6", 0x95}, {&(0x7f0000001940)="4ab82241fa8f5006ee8940a90798f5494cbb63cfbec222fdfad81fb4aaf5b99afed096f5e3cfaea39040a02e4878fdd2b0269d02bba233bd9f36f7479924af0df6ce0b0208c6958dbfc81610759dc28423f6b6fa821282c3c323dce32e4d5e02cb8314a8ec506a236d30694d2ff969643ea7b63834a930a9c5379a24c6bff1101e8730b8bc21abf4764d418c9d3aa4e3a4a86b32877c", 0x96}, {&(0x7f0000001a00)="b071fad8832f7cbad93f9b2514cd1fb54764348ee5c016b75185c60fe1796a3e38424d4c61a7677b8ab219d42b687a409b90d5cf319bca4b35fc62f05be97394b6038ef02bc1610a9dc145ca20205ea0c30017f9c454ede1d24ac2d51bfdac300af393869b82c21d5141397478cd782a430c6ec20214e8acdb2d0133bc7afc26cf2591b3fdc89eb4f7", 0x89}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000001ac0)="87ff375d0bc42271e8556a1d6af80298d27dade5b1b25d68726e492f8c875bdc061bee5c866043b2cd1b5a732ab7b41029aa83caa42479058265ce7fb1011dbd7453be8b2a55d4e540d010a802e7d7f89787d6ab19312d9605bf31534ddfcd25c7a4b47ab0b5f60e3dfdc7f7921584257d2d568791e9ec5c29176fdc0589d976f7a9484c9e941870323b7536cc536f10e3820a9d3c3a890bea71bbffc44ef726acd6f635b5aa26c18a2c8101dd82ac033451960d332bb2f8687d43414c0ad9742c6975", 0xc3}], 0x5, &(0x7f0000001c40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}], 0x30}}, {{&(0x7f0000001c80)={0xa, 0x4e22, 0x9, @empty, 0x7f}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000001cc0)="36baab99fad65d13e077f3bc51b0f7db0ccad3987d285f95c3f04fc0ad1138128483b6ecf99123e70e7ee59d6089630ba515d954f049b6ae0765d1488fc1eab0d3b906898a83f6071ef293c845162adc8a7b931491a64421614a2d3d86a81eb247f12a3d926ea04e90e56cc836b9cdc481364f4c1ad159531e78a0b08f40c94530ca8a25510826d8e095d4f5b52d897372", 0x91}, {&(0x7f0000001d80)="52850a2398b1375ea03e14b843b55759dde001e09a663fb1e036ff3673501a35cea37e10a28c4c36e3a1b232f417250747b36290ac2d6c2cac289fc04c0be54ff48d5f86235bce9434b22c250aea779a55cbf37ef7b8d6e0806f1b99f513cdc500312591cfa9c03b3f2840ec0001cff5a445569e089b0570e416477b8eaabe3e670915bcce58c9b1ec63c53f865cc2155b5ef56d392f6e6ca09116b3406e788b47cecb8e62f64ec2d75dd65ff974e16802db56dffdec75ac728d8f85cfb750d684f058fd6ce8256119017e000f0cea582031ba75d9b409aea5f9698c8eddd7cf001a", 0xe2}, {&(0x7f0000001e80)="9ba98f391e0f38e2eb2f51e5ed4e0638cf2bfe1902ae1275bc52e5025723143567f517a88348e4e69c2a00f27c2f8eed3dd6b06322a4e237f4b774175234bf6bc5bb139720070fdf7538f22d652b55bbbbbe7acde861e38642f7f32d0f57160a5de3633bea2666b8de21697572bab50db545bbf05dc99b010f7450104c753bcb954def50b2ab90cfc2663cd6e4b3302e0be44a472a99fbebc450c71c501b4dd3be462b326e42c97d6c2c6a42", 0xac}, {&(0x7f0000001f40)="ca02847ba955e10881d2669c8988c76af50f71a864232d548b3458a34cf396b6c7a6a79349e903954c98b9e161e983be1c436d927aef1fc63f7b514bace20338755fa4761111dc8bcbe2a567817fc67d662974b6bfde0bed1044cad06123017c56913909189d2ab44dbb401f9b9c9b566b0a18bbbf04b282cc7b45dc69f85e4106c8303a2dd25fd25f7ab1bca6369d90d91b7b5c5982d5ecd4623249e3b7a0c4a4d78df1cd65e588462ec253", 0xac}, {&(0x7f0000002000)="49cd5c6c4eba962e91ae106749fb54e838abde529890c55e99da04c173ef7f9553664413e5fa05160d5158695231112c10a10a472d2650e91ee1eaf834e054f456bd7b42c7ebf95c8e1310cc987b7ee0c87b40ebf354d22f8fd463bb20f7a1227e079996b92ed57aebf3f86dbb677d06be23ccf0f21880bc236858f959d57285656088e2e7bb8ad603971c8e5d26b8878c5921b452a9c26bae70fdbab854c29fd2903e1091dad75063e78df800c577ed00add4961448d691", 0xb8}], 0x5, &(0x7f0000002140)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x1, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x3ff, 0x3]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0xe0}}, {{&(0x7f0000002240)={0xa, 0x4e22, 0x2b, @mcast2, 0x5}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000002280)="54fb539f442b5b6267d432cccc087fff2504f3d859", 0x15}, {&(0x7f0000002380)="b7cb1ef78ca9212c27df9d4df9bde8ba7a275f5d989d7b0ca4e57f45bf7f4b3930b9838324215fd903db76dd8f14d0c1dd47c9c7f81019c3da1e71edba20608d52bc1beb1eee4d88983ba9b78646a3148f09c46ab33daafd01dbbd8c747f06ca1166a19609fa40f39f70182a637a1490d6a3ac67d479a378fa400371a5c4b64c0130ae2c49fc3437ebc068f43d95879f5b15393d90fada57f1824b3217eb10c28b50348949de2c77935a9e0d624cab4dfec10776bedb", 0xb6}, {&(0x7f0000004500)="e098dcde25bf46bf0841a73b47d1567fbb5a5f908c14cb11876c785cf6f47445abab23eda2a5a1071a68f6039f272204a83f8f2204e7a5f9eb7e44654df25bf77b1294cf4e02484753d50b6d3f82b6e02b4125cb7e6b670ca5a536a881c86670d62a688bba5925b454ce248544a6c28ca6700553e887ae910dc44b3f93632d419c6665dc75309f2f9583c4d3b401a9f22849e15d9d7e613ddeb6d2961ead8cd7a88ba930cb8d01b5759a8900010247c77b4254ca6a3fa7c20a6e7a9d51db1a235de438e4146569200a16dbbd65eb3694b3e8955d4b7e8a00d9b57af382aee197c43d9bab314f3877b69c2b22a2e4c8529a", 0xf1}, {&(0x7f00000022c0)="f36217581f18f8b0dcde6cfa5401509f345ab3fd3d130d75c19b23f9bb7b3d7f5995ce963b901035a47436af7ad0836f5d654252e7521320d0d209ce93abd66b13f969c45369752b4143b627dc7b943385e6db0a7d34b01cc476f6e7ab6262c3", 0x60}], 0x4, &(0x7f0000004600)=[@dstopts={{0x100, 0x29, 0x37, {0x2e, 0x1d, '\x00', [@generic={0x0, 0x4a, "e7aa7969b4fd3eced19357af6da8c90946c0a044c81ba72d6b2e9335688baf908eb1a8c2f8bfe228a8b828943caa9037d79774616150cc53b327ade601a3f31754352d5cd6427bb84ad5"}, @jumbo={0xc2, 0x4, 0x200}, @generic={0x2, 0x7c, "0da62c46c102d415a46f60458e939cfd2bdef59a3b744cb4d642b0e9d20eecd729c65505a0a3b6bdd9d0461cc5d469410a471d417bc3e24e45df423b214f69cca0e6a40f27f3ab66bd747ef9b622f2f0d07ddc137f64cbb3c53156a9a5e78619399564fc2c210136a597fe4567d90c6adb60f6176e0d18f7fdc0578c"}, @jumbo={0xc2, 0x4, 0x75}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x18, 0xc, 0x0, 0x3, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x1d, 0xa, 0x0, 0x90, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x23}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r5}}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1000}}], 0x270}}], 0x4, 0x20006010) r6 = accept4$packet(r0, 0x0, &(0x7f0000001180), 0x0) dup2(r3, r6) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000011c0)={0x0, 0x1, 0x6, @random="c71b3fc823e9"}, 0x10) 23:30:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:30:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x700, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:30:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xa00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3b) 23:30:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46200000000000000079b8e1e50000000000000000000000000000000038000000000000000000000000002000"/88], 0x58) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 2426.467661] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:30:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:30:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3c) 23:30:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:30:43 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) dup2(r2, r3) 23:30:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x1a, 0xc21, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:30:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x21, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xd03, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2426.700033] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:30:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:30:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31363931393939333900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf7e49a1d95947318303ae70299e26a0010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="2000000098cfbf5498cfbf5400000000e0f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000000040)="8081000000180000e0f4655fe007000000f4655f00000000000001004000000010000800000000000af3010004000000000000000000000003000000400000006b721bf5274a8356053c698daa67bda708244031c689eb1082d6f427afe7117180677111951af1310e4bbf8a4720ad2681e57ec3a708c0424bf411b4b9fc5a", 0x7f, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x3ecc0}, {&(0x7f0000011e00)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000904c48a10000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000", 0xa0, 0x101}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000007e8b766c0000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3136393139393933392f66696c65302f66696c6530000000000000000000000000000000000000000000003e5efe8c0000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000268bfb120000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000080000000000000000000000000000000000000000000000000000000000000000000000000000000185600fe0000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000e350ad400000000000000000000000000000000000000000000000002000000098cfbf5498cfbf5498cfbf54e0f4655f98cfbf540000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000000640)="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", 0x112, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f00000000c0)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzka\x00\x00\x00\x00`\n\x00\x00allersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="81aac10f0c37c4c121d78e457f44d29c32b8218d0bf0039c72ccdaf6bce4dbfa365ffaf8df38aed826146c9a3cd450ec3b9cda2fc2c972670f7f59bb1c57df7d03c0f3c2678607b13a3ff43948a6a21cb2f7d529597f77672b738d7c2f0ecaa641e63406f27b4e876e543cc2e281170a8414a335e15a7911"]) openat(r0, &(0x7f0000000140)='./file0\x00', 0x208482, 0x80) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) write$P9_RREADLINK(r1, &(0x7f0000000780)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 23:30:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:30:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x29, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2426.971536] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:30:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 23:30:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:30:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2b, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3d) 23:30:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:30:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xe00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbabbbbbbbbffffffffffff91004c008100210008004500002d0000000000069078e0000002ac141400"/67], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto$packet(r0, &(0x7f0000000100)="997899ef6284818fe0a70f0862656fee346b0c8e42fc3d5b4de8a3cb3cf34876e564e23508da3b5a68765cce1bd2cfa190735cfa33d21380180532629f909aa11547ade2c9ab12ec9e5dc9b3318b3caebd749d73c755ba5b3981bd6049dd2220750c594e9e8c652f6dfc6a9d92ffa583104c9468174828836b06b536d5bb5d6a0b044f659901", 0x86, 0x4c881, 0x0, 0x0) 23:30:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) [ 2442.275511] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:30:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd000000000000000000000000000000000000f00000000000000000000000000000cdc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000400"/178]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) splice(r1, &(0x7f0000001140)=0x100000000, 0xffffffffffffffff, &(0x7f0000001180)=0x8, 0x1, 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write(r3, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d", 0x26) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r4, &(0x7f0000001400)=""/53, 0x35) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') fcntl$getown(r5, 0x9) openat(r4, &(0x7f00000011c0)='./file0\x00', 0x2a040, 0x2) r6 = dup2(0xffffffffffffffff, r4) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'}) dup(0xffffffffffffffff) unshare(0x48020200) 23:30:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) 23:30:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:30:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:30:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2c, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:30:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3e) 23:30:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x4000, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2442.538655] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:30:59 executing program 6: socket$packet(0x11, 0x2, 0x300) 23:30:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, 0x0, 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pwrite64(r2, &(0x7f0000000100)="7e6c0220dfa25420d44fa46f47014c419e68080139308400457223a5924dbe4f4596ba3e517b1fc61206364fc3f3c098df00d87a267d83202f601c59f210dbde609f730000000000", 0x48, 0x1007f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r4, r1, &(0x7f0000000200)=0x81, 0x80a8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f00000000c0)=0x6, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r3, 0xffffd000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 23:31:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x64) 23:31:14 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6428c2, 0xa0) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pidfd_getfd(r1, r0, 0x0) 23:31:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x6000, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2f, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2457.771308] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2457.788453] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, 0x0, 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2458.016365] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, 0x0, 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xc005, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:29 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000900)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0xb6e, 0xc008, 0x0, 0x401, 0x1100010, r2}) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r4, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000000b00)=[{&(0x7f0000001c00)="8a69c8b56a3397550e6f042e0647481ea99d684f808d114f258688d16ea2618502023954c584acf9713b069c45c247e06b15aa99c099cf21d061ed0a8f89d7d1747d740f63423b1c9634d9f23dc0eb59ab6cc0fe819307d8281fcd0f92514621fe3732b71601f0d6d9a59066928c8c39c9df02f5451ba81470eb61e305235fb4043c0cb89d67f1762f003b1ca872d08bb59c5c3ad56c3a18e2dd51b9c85ce1263c733ac5f92ee0168ce10f5283ed2449b9eede5c645731c7f29514288ef6f9ad5c07f2d770cb23251849cf9cd22b7a3806794ebe7272ba", 0xd7, 0x3f}, {&(0x7f0000001e00)="050e4e1fe20f435f78d3cfcbaf214d6bca0d14cc0b10403ccf261c59ed1aedc6a36863d5d284f34b863877d86d05e949d8d6aa671d7235dd0fd535209c36b93aa99415be37e14b4b7fa90dce439248f3d2c1527feb80c3fe75900219a27c110bd32bae89999813f69e53811c6aace2cae24f5cd5aed6bbcf171a7e973cba95ddff826a6a5b9383809cbb664c2919ab9e580440677e7e91eb0568ef33d20b3194367704566514b87e29046acba87468b541e3bfd7c3cf0c9eb6a9a40ca47d9cad6a0c0ee8de47256ab1866414bdee1dbd0b0be66f79dcbf0fc08e9166d5e2", 0xde, 0xfffffffffffffff8}, {&(0x7f0000000600)="f77a98623e3c5371e6b5a20f72f628565f824ced4560a3b2ce2af6e48407c6ff19e9668211ecebd93e62df494a1cb61a7904f9bdfd6e516c750cdc2b07ce6bd35e5240ab20a93b524e714d7424f7233c40d20f1dbb3db9a4515422180c9dfeb6276200fb909f8d6b142ea7c2c704e84bbf4e6cc1a35655e309de8024c29b91115442f59c2e60c04a778abf2b91305c057cf74ca271e3966b836c33ab05c608462bc93f1c4984", 0xa6, 0x3}], 0x1100048, &(0x7f0000000b80)={[{'\x00'}, {'io\x00'}, {']{-).&'}, {'\xff\xff'}, {'io\x00'}], [{@euid_lt={'euid<', r3}}, {@hash}]}) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 23:31:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x32, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xf1) 23:31:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:29 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) fcntl$dupfd(r0, 0x406, r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x2, 0x1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0xc, r3, 0x1, 0x3}, 0x14) [ 2472.889270] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2472.899209] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x33, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x102) 23:31:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xd805, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2473.147893] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2473.155566] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:29 executing program 6: readv(0xffffffffffffffff, &(0x7f0000000100)=[{}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/2, 0x2}], 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:31:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x3a, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) 23:31:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2473.379726] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef000001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000080)="ed413d1b72929ab398b451f524f2fdff815b76b62ffaba876bffffcce1d7f4651fd7f4655fd7f48709eed3743d84c7531e59", 0x32, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) [ 2473.415116] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x10b) 23:31:45 executing program 0: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000004180)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/18, 0x12}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/80, 0x50}], 0x9, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000800)=""/35, 0x23}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/116, 0x74}, {&(0x7f00000018c0)=""/187, 0xbb}, {&(0x7f0000001980)=""/129, 0x81}, {&(0x7f0000001a40)=""/37, 0x25}, {&(0x7f0000001a80)=""/67, 0x43}], 0x7, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/37, 0x25}, {&(0x7f0000003d40)=""/87, 0x57}, {&(0x7f0000003dc0)=""/93, 0x5d}, {&(0x7f0000003e40)=""/211, 0xd3}], 0x5, &(0x7f0000003fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}], 0x4, 0x10060, &(0x7f00000041c0)={r0, r1+10000000}) fstatfs(r3, &(0x7f0000004200)=""/239) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000004300), 0x40000, 0x0) fstatfs(r8, &(0x7f0000004340)=""/36) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000004380)="ceb2868bdf6bb983382794ae6b6f22a791d63bfda19a6bc9822bcdf9c8668a0a85bb89881f0aa6f194766ee564d51f9967d1e571111e1733b32791272186eba2baec3674eb22c9ae47613f5d40375fd33c52799d7d29a3eee65bf1b9739a392863871299c48d2f", 0x67) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000004440)={0x4, &(0x7f0000004400)=[{0xfb, 0xdf, 0x5, 0x98}, {0x100, 0x1f, 0x6, 0x7}, {0x9, 0xa9, 0x9f, 0x9}, {0xff, 0x40, 0xff, 0x4}]}, 0x10) accept$inet(r3, 0x0, &(0x7f0000004480)) mount(&(0x7f00000044c0)=@filename='./file0\x00', &(0x7f0000004500)='./file0\x00', &(0x7f0000004540)='fuseblk\x00', 0xa00068, &(0x7f0000004580)=':\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000045c0)) r9 = fspick(0xffffffffffffff9c, &(0x7f00000047c0)='./file0\x00', 0x1) sendfile(r2, r9, &(0x7f0000004800), 0x100) creat(&(0x7f0000004840)='./file0\x00', 0x186) clock_settime(0x7, &(0x7f0000004880)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000048c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f0000004900)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000004940)=0xffffffffffffffff, 0x4) 23:31:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x3c, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xe605, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) 23:31:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) sendto$packet(r1, &(0x7f0000000080)="cf7a64a10bb577ccfda9e9217c4d2b53548ad023e2392d14d43ee4994f8f0e8f2b881659f2fc338274dfdb2c816521cb4aafc999b0d4bf17c8dfcd3c2f551dfae172dfbfc53003c74ea8a90972da687777a57f5380b23e78d573e0c71e507dccfa9b64ecb8588ae1f71a12513f1df2ffe6d43e273e649dbd6a50cea1124a6058e058e3", 0x83, 0x40, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2489.227585] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2489.247535] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:45 executing program 0: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="015d8936878c5f1d00007c0000e6548fd10b613e825beb919d1ef6757963a63fd08c6afa80d5662bf2c61f2f370ebfc44198e198a4ecac8a8109d989f69d76af2ff33965522ef37050ba27d22ca862cf7558cecade39aba6c3ac1880c3680289b7497ef2e514d63245a041a2b6ed8b33fc468ca3ffc752ca843dd3d435bc271e2c15b0f24df2e923ba43"], 0x20}, 0x1, 0x0, 0x0, 0x48884}, 0x20000010) ftruncate(0xffffffffffffffff, 0x8) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x0) r0 = add_key$keyring(&(0x7f0000000640), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='big_key\x00', &(0x7f0000000080)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:31:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:31:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:31:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x3e8, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 23:31:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x201) 23:31:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xe702, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2489.486463] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2489.496913] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:31:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) 23:31:46 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x30940, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:31:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xe803, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:46 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x500, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:31:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2489.668731] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:31:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x281) 23:31:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2489.815937] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000080)=""/108, &(0x7f0000000100)=0x6c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:32:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000080)={{r0}, {@void, @max}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="037f8100031d64a4272463ae3f078830f783ca92919eb5e5796f3366ed3bbc2b5358bab0db1f82601c561bb6889937889ae64d5225bbb0a1f3c3a321573b68ae5a67c5765e3d4ca3abdf6040d6e8b4442a"]) 23:32:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) 23:32:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x300) 23:32:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x19502, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xf401, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2503.943119] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2503.954240] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x68000, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0xffffff84, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0xfd00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:15 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001880)=ANY=[@ANYBLOB="280001000000210c00000000000075f251c743092f0000000000000000000000000000000000000008ab0b919845bc2b6e88bb789a2d5a1f2f2c0bafd8e4ebe2547a7c1fdb350691b9a54e13097e455d3c885a229178ea65e267627704961fe8b32cd73a7f61378518106646115d37202932dc621f64c6cf79ca1752b50957cf36a7a4ca638013316906f79a880a2b5a6554a60813bf927d13cb25242bfe52db77e96afe82c46a301b1edb7aa73985c30da8dbf37c324671fc4e36bfeb74a6eb6fb432bdc598d2f16e81bb88d8b7fda4584fa5e80bf76e3aef2eca8e839cb4023099b0ee27"], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r1) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x8, &(0x7f00000016c0)=[{&(0x7f0000000500)="ef5e367c0a0164b78d1e6a00bb6cd806f2ded8d6f6f1d857b62d72f440a1436ab19be280eaceddfbe67ea3e8738a2667f3bcbdf9e58cc3c888a36befe7b69a5b299cf2f1e7d22d6db22c805d4caa7b20180b7c959ee74ed2b5109edb222b4d65eae4a9c65fe3cea9175ba1f17359dd3f25a9d6548214f4166eaa2b0b90ff778cc0829b28f415dc0bc7177b1fe852f6668649f70a825e68aece182169430e716b3004ad3329e7d7d6c2dceb0824979c1d52c55d8c83f62c86de3d69bc168d8ac5190c622858f331dc4aff8d7ee1ae918a66f047a2f0cdb33fcb66bc5c21b80c539528d0a3372410d81060c3aa529906a84b04fa3b3776f6449e592ea258ea6225e84e71c119039ed6f0e7fcee0a73924becf1239dbd4a456d84993eb3653117b7f11be4e108ad9e6a68f9537919ba59d1aabd107f65bf9e0ac0fcc8e6f2b7995259fae4e7289e2e4cd0d91abe707d9e632afc91b7ad599bc0c895f12d662f05c9251e801ff02643f7856a287849b94877f260b74b8de61a59da3a7d8e53e42241e8ac284e2d0ac8746435e553f0c978b7846f2e399d19a2aedd7fbb66d52861759749f018edf506b6cbf51293eab6c473689d1860e9ffc4c88ba244a8ec9cd02f948ee161ccd42724f6a9cffb5bcc7203bdafbee2c4e105d0d464760cbd7ab2aeee0b176c069eab2e9a6ba8275cd571fd375db227659e3dd7d6255c6178c1cd6c9586c0258f9030a720bedb8fbfae0519ae8185f95cff51f1fcab979de1ce15b3a32859d2f7240fbccbc1e5e25f4592578edacf290b025041c39649949bbce91dfac91cd021425c35dce52378152d7f3b264842cbbda8b3ca24aae7ea1a63848dc161789cb9121028de3296ad9a3f36f8a7fdf47710c87df924f75e69198d23fa12d5e1a2196ae101d87d22f0187a4c15fea5a50edbf0d25117cf25cc0a8a25a1547660150bca8754da5edc08105149798014de8e003bc8bcc769d134bf371baf5711647744b7a8dc242c94b702c9dbf6d96ae36375c0ea96cf22b45ffbd258338659d7b3f8a0edcce84f835f5eb4e139f8e6159aca6e4d7946bbd4eb36ce40a101e590dc0f3d7400b3c12d80f815de1f31f212441cbc170fe4897bf21c49741f2610aadeec8ddc9bf0892a794c72587ca3ebca4a9fab64db22871e079b6b9827805e7e074d1bda61a186419c2da2643422f40553461887fa8e0b877b6277536789970a5bcf5b7fa4b12099f25eacae707ee5fe35e6fe7f95c11de5fbdeb1f627138cdefd25af32e5f377717724735eceb723554661b874a2fda06415a8b1cda510e28dceac093ca32a318d964aa8ed509ee52e0d6fa78a4feacc8b4237161a6e980133ceb444324d26efe11bee07af0e100f5df15d5e108216a1bbe79c240bc3a202b9106d3e344eccb476a429738adca2b49374cc9a4ecb4ca4b55988bf297882e8ff028fd024196f584fbea2fb41a93f194579dbd30500a3f86a1a1cc94573ae1354de1843e10db8b485d6be8e4c31cee4f36ebff25eb0ff6795e8f4ff214787bb57d0e94bdaff46caaf7bdd0c69d0853286e3a68bf3b186fde8ba5efa0ffabbe21a95e377bfa7b96a9a462a689001e90f91665b204d7b5048be7ac174605298d8b7f65af6bb4b57a7ff444070098401e3b5e90075f0f67c3d0b0d340d905998d3f37789bdee51872018794327edf3ee52ae4a7660d3614d121ca7face35afb11681e71f7fcf6981807926826d0fc26c8d794497323d57448459fba81102c2e4f2b1775b3e60e8003992d361e8390969471095013f8f4b1ef181802e4f14de5303ca9e3f54ef292929acc6aad139aa8c6177ff3e578ceb82408d0ff6beaa99bba3918a3184b0292c37af6ce4f8bf1ede9176c99e03d9b0306d1380a816c2d28ba598eb0fadbf47ff83c7f49cd5381a2e9c56213f37c420ba1bb6e54a1eae6ab5150f95211b8ca772b47ee1cf3d1941edcd263651fb87a331345db68f9e87b61293ee7ef337bc3e057ac20aed1af0043d632256a1bed1ded275af9bb0d89889e37feb0305dad6927dbdd939af9842b34e9d27398f11b87d5c0f9c7bf0968f778af8ae7ea6f5048581e7047b54a83fb394b04c68e69f159186667c58d77895234f4a8a9ef3c91831ceb6fc7d6e07dfb9e63939132fd0e15d88644e3a852e8e4aecf615bd9e3ee2ba7dac88cb281c9fb3c481103946caa3daf5b56ce4ddc540d1acc02f2c4371a5b3db645b7b16a6ccbba81895eee94107c6cbe71f4b90efbb622198a2e308d352a564a6113df433f364871e1a64865d780becb5dc50b4c64eba022d9fe6f2635034790ada59e08cc7ed84fa8fea69261b2f9fdcce9baa15b0c75441ac3f7933083f58b70a1b45dccf569b0502ae7052e8bba59b62b6090f6178c094340ca17bbd17a981f08da719a81dbc6a63918ef88c5d9065783833be93fd9568330bb14fb871e7f655c6e3819878871c5f099ff37154ce3f62c6efb4fbd88c4ba6a65ea2ea6c3986abbcc8e0fd970705348a13e4bf946edac3308bff60778dd9b0c2d01d22697ea1de916272227d9c9a418c1d729f30cc9953829a5dcb51c9456930b91533245a6fdbee52ec88ac5e2504c65e81c8e9383460038d1869b1ad5a90f12d492a07005dbb8034caf925a9322da323971e7097e627408c0911466751bd5ab97687a234987c8721ed70db1c7a2ddd3e7f4fd3740719d1178b2582901685c06f195048664e49b2936a348f59ca0b4b4252e339ad6c38b33207af5bfc33f0115b2f99e83e6d8fff8c4229901416b67343669c78335f663aab55845d33cb0085ac1a9ffe120f4747754dff80cbbc9f850638f3eaa545ade5646b38ab0c759a52415b3176cf904a50e0e0b8383baea248652f80bde1e9215b956169e117f2083a65ea773d52481372c9ceb3ae15b41340d4899a7e781b1cce28f1eaac754b19e88221f72117d115a82bda11600216ae4fcfcea7ba8bd6c7b266e80fd7f7e9c3f89077b2979f34b2cf0a6cd24febe66dc0c20fa7b36c4e9740afc214e51cbfefcce106519b1c1fb1505c2cbcd5c7788b03245c507c57a07d594d61bf1c9b4ba6704fe3322b38d0833077e446ce9b26056e0176e01b308599daa24fcc5527fbae131e94f848e0bea92ce6266c37791698776fd43b859e1bbd43c5dafd2cbeb4fca8d7939b16830db947c672430858c2b669abc74a3edbe1abf15d261554c178fb19b80f784ba1b060f3c234c1d4b00e240ba52a16d7113147545f425978cc6fba44c32347293ed276c9743d7f254b7b839733f14808a2ca8047305ccb481748c0c48f8dfb8275cee10050c16971c8d455b8dcf376c5617a97045c26b29daca9bc0cf1ba3ae04036938f93648017dd2c74d7dc500b217262653dcf6be45f299ba93edee47825544ae0f9b3d13fb1805e4c0c3f81361e3570a24cae287e851b31a844195880abeb328ed046d50e1e41a01205f217cd6a5f98d31049e095f3282c1733b82c7ee178eb06cda59b757687549ed2aa3d058f2e07ff3635f76cd388377151edf676701e1aa3df3136b519a6eb913a2827670f1d9dded0d3ecf5d31edd832583fc0fb18d25943f5c91b66e1eccc33e6c9b4825b7d96393fb728fbd08a1207f3a3e125545a131d39689d26e8f83e3feab609c7b89a50d211ef89bb2f14b0030b2d2f05b18ea12f69530dc9705b7cdc7fd8277a0c723b3466b896c76e7632797140e694556abca78e5155fed4c4ef1223c72771cca629228f1fd459709e566dac1538d5e6985d52e0c821af9143cdc7dc77962f041711908eb9d7eb5fd9a46ce2d36a24ef04a18ce26bf89809bc9807812c0130b82b2e5f5b856ad05080598a37ca4af6d9f1268de7c1b3080da96ecd9425fdfea30102cb690ba819136762180d8fcd822afe0575c62f1cd344b133a95ad3e73cd119c74f041f05351644c5ce11d5a529fdfa0ce56b419ba91f9244c859c64173f3627ff368e28e7dd69cddfe2d364e428e4600549ba67a909d4a0198f5376c4b07003e4f7ad93b690228b2bba914676208842edd3936201f375a8b5acf8fc11cc3cc3dc6f1caa849e0f01d085d675ce19512816767a2d5d1d850b6eccc12ae57b779dff2aba3e8e2c5d0792b546839bb5ee402b0766702391138d7d99cc0a5c3028e9cd068ad7cb3142d4016b0ac2fbd8be22716ac9550f478a525222c1a3fc04c8884f75f4d95d352958d672334da153421542795a386d8a317cdc74f488c621d004503749617b591c83d4cabdba8533351009df88d06b02ef828260010e1a0e93512d0584e177e965f45853ee2ee95f00a06cbac64f0f95f177524ef9eac5b238b3b11737490de3bd115704b11a45902b3df4a4d2049f6e32089f8a1fd8f41330e3973b41263b314045f20686cae6e3cb13e2162d63ac5c7cb4c653e2f85593bd6712c0bf893520d1f8cd39a807ad9ff1d0023801d219a36ad23f3c211f9b85f3b4bc11e80aeb65bfa58ba90bd4802b1ca87096b38dac1eaf41053d15e3fe245bfb614a00012314dd14bd2f6cbc65741a3bdf6236676ed0e9109bffee8163c3fb7268ddf336cbf6aab1ea66302be953af9300358b54c6a9831b7b12e4aa696bb6d53e3476a0d0777098569ec882e62fa7a5335cb9635b8f96f8009b4420abc6a54e19f47d0685699c3650b097a45d0a58ab2053c50d6212b2e66d6a14013a6b12e69524117455179a891bcef3a85764c4a0922e3367cae779aaea9963900475a057f4855f5495d5e553897786f8fba3f3873ffa2c0f5b87457bdba044f998f77f3f04240781b411a9d895e4ae349835348cbec6d97a1a2f441d7d699dc047e4c6f1079161e8b083714ab513a106477fe6f9fe76789114c006d834df1fcf85f02e019f1e296a1dcfa9dbfb97848b03876648cff5ac02f599bc92c0b62c7e89a237f6abfc0dbb057dd1b9967274bc9bb4ec11e8e30a51535001197eab9116a760f0afbdba731a8024b016d0c196806058abe2dca4a59a31e404ed3122a825b20f1875abbe3384959d6498640a5d40f86ae917b8e34a8c4e10bcef58125494a82692a821142c22428c6b8959a0b7b5557d81545ff05d7eff869376fe0f56b9ca286914d7dc8fafc1e66a4d75a854e9c33a86aa377c55cb56855767b48b86a0078ef5208dc4dba3f8c17b9dcec9cf2e599897ebfacb731616a589fb268ecf74e6d0e9e6a3f510e75dd8419b222e84e3507222bb96da950056e28b10d4d5eb951977637d34409db3c35506f9dfbba906b250041117cd82d5c69983702fde8fd91fc1ef79088f7fe222c7918acb69bdda1d7a723a2faccf265f705011f6b7910f428e69a823d0eef6b712f58cc2897f1141c3096145714720382f65b654e5a595a4bb530d2cdca6c8ae0ff8c21d9edf0e99cd4af8d7e225a2557eadff97528cc103f3dc51f4ab191583f9c1a656893e3de758b992ddad69f3ccc6a7e69c3e4b21200b52c089d6902ef5701fea14c7923de871cd9c719140ea3e57de6be9b9c8ffaf69889f9fb483db34f2bba7184b30e4ab603a157452d23db6aba7e908e2cb099a6b7f2d100b3fc92db12fa4ca193727d8ab707c14d75ddaced7832b3585bf8958f1c91640f52e2bd53c3614885bcee6380cffa3776050f83a09d0e19924b441fd328f09351e4f37e770721854dd12280f544dae40e2099a1267e40ff4692905bee36c7acb90947fa9d0bb062497bdd98f2887681f9c6102b6bdeb2a6be159040270c5a8806fdb65efe20a614dd871a81d0b042302d9de9b616ba1b978491c68b0d1c4f5f5e59e2b2027", 0x1000, 0x9}, {&(0x7f00000000c0)="ef05c535fffd6d6585124051e79fe59dd708764d51c7e9187ddd77a833beab79cced2f642e70c212fa5d500dbdec444c01e6795aa516d688a3f0437547f9c16998804083e941d1ebf0e213ba6cdfd80a3e085b2aa17515c92135018ac09820871cc0de1d6e8a3f50c1282db421d3014f42c04858a4", 0x75, 0x2}, {&(0x7f0000000240)="896e83c3df9b019296c085b02da3eaa00ffcd5742e2d8c67530448bab6a79fab68520dda951d8ad4a93466dc706c98a62351f9f8f93af1a350ca67725303063e784c7a77e19e02546190eb6235e18fdb102dd651f2a5bba9bc4f2557bcb6cae515e80c550781dc760245a2ff7252393fddb2916a0c850db281bb0162f3f66d2236233ae3230bf3a2c40cfd9b71382ffc031b51b6df98289523f6b4805b11d4cad1f9e1a9a7384ee89571ff187d33315d4dc86367cdd91a0c0af61fd10abc7befedcc861296fabe5b80476b5436a287960208fd", 0xd3, 0xc9}, {&(0x7f0000000140)="96389cf8a9c631c3d1e509939442db7108d140d5e1b92cdadc49b5ae9c80af6fab3df5465ebc731cde31d9988ec5769fa40db29c891eec4b7e3bb51672f4786bd5bc36d0f3a735ae43a1df3a91baf362a0af827672ed7959c22e95147262170c1536b2de4a2aa469754fc9012b993ef57f388cfd02a56b41f7dff7838c6627984a6aeba9f766e350951d1cf9b58a2e279e50ee9a56e53ee510b7fac5392c12718ba6175205c2e5b7bac5f0bc1b", 0xad, 0x8}, {&(0x7f0000001e00)="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", 0x1000, 0x7}, {&(0x7f0000000340)="840b19ff9265f3bfa578db30df27000be7cf09f7ecb58d970bc84383a6787dee1afc66fa7cf9595dc7e3e20cabb40a737d55519fdb4b86632030ea002b1f62558226d87e3caf8de38c409169afeed36922d7809d9623c126e7b2f1c0c5cca0f7eece2792f7fe7d14a13e26d16a13a3c013d35653a14476a9c1f06c9b4cf2107e067e0612136687af63efc8d8cc5e7dcc781582d33c2b2a328b91b8b1bc16862f5bef83750372fe0d3d2a6e1ed37c6ea1a01a4eb7c2f18b57dd5567643a1401f40759ccddd34d5ac6c89184f1bb3cafb06d24425a", 0xd4, 0x8000}, {&(0x7f0000001980)="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", 0x14d, 0x6}, {&(0x7f0000001600)="9bb4a587ba25f3b6bbc3e14eb4717c94ae28591e7cc71a90febf402770c3faa186df7679b763b8ed7e5cd0085e9af2ab38534ba03fa51a4099995b1e4b567c4175fcff8de56ef03ca25ea86b2abb1d87484886f025914abfb3bc178c8749f8b96887866ea83eb0389ebbaefa4a72cf802025fc3dad526429d6c5e3e895a5422cfb2bb088fe9868ef509394c64a0fc437719878f75e6452f3a8a936fa2f7c6e682058586db947d3346af01267bc3485d1", 0xb0, 0x400}], 0x4000, &(0x7f0000002e00)=ANY=[@ANYBLOB="6e6f71756f74612c6a71666d743d76667376302c6d61785f01617463685f74696d653d3078303030303030303030303030303030382c64656275672c646f6e745f61707072616973652c736d61636b66736465663d5d5ead2c2c6673757569643d37393634386166382d313139652d336663432d633663392d38613138646531322c666f776e65723e9e8c7b92760dca8dbfdaafc527900dbf041584785997dd88ac484fc23567407d469c3ab26b880c47ebd9059a36f76c3c2ae0e08141ec4ddc54b84a1bca96f048daf8131226c263cad2980f604b6a956f70a51fe4bae1e5e26fab4dd48b0deefe30e7000e9aecf8049a8bb4a740899fcc5f86bc980c31be112ef5578fca666a0000000000000006796c4f76b9a31fefe94a1db6de81bcda8b6901cc523a29ddf826924b082b8171b70302d8b4f984daee7b13f88eb0d495cfeb0323b430d6f155c8ac8bff2a56367a8c7f6374981d0890f6326cd95785681092", @ANYRESDEC, @ANYBLOB=',permit_directio,seclabel,appraise,subj_user=,(+^/!)+%}*},\x00']) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f00000017c0)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r3, 0x4de, &(0x7f0000001b00)="66875d8db8afad147072d15cdc28e96602a87436303f82fd1cf2c34c8764e0b2025662559799815e6a1cefb033f9c6e5fd972bf9ee3c4c70718506f6a0eb7cfb068206b55d0922a63074a6ad2d4d78eba4374bb0650b1c909723da3ae0201eecca964626112721af281c500e50cd8daad0b9dba77e0c23100295041db8c3d4963c1acaac1c4c4c37d530f3fbb88e9552bbc92ca2c092622976c14bf74a91a238a102a58e41be4c2bf58aff11ed6244804a6211ff9618d03f8b6b928d836810f14d40d0993265fb0a1f414999ed140004930cc2a1ea1239f63bdde44fa5c55fa42cbb8cb91e853d4d1572fde859c640a907e5292a2028", 0xf6}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x50000}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4010, r4, 0x0) read(r2, &(0x7f0000000440)=""/35, 0x23) 23:32:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) 23:32:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = signalfd(r0, &(0x7f0000000200), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x2000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x5, 0x2, 0x9, 0xfffffff9}, {0x1, 0xd4, 0x5, 0x9}, {0x0, 0x2, 0x1, 0xffd}, {0x3, 0x1, 0x1, 0x5}, {0x9, 0xff, 0x4, 0x5}, {0x4, 0x4, 0xe7}, {0x6096, 0xc6, 0x5, 0x5}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000001c0)) 23:32:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x321) [ 2519.109855] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2519.112861] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x42) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x81, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2519.299091] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2519.316051] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:29 executing program 0: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req={0x8, 0x0, 0xfff}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x2, 0x22e) msgctl$IPC_RMID(0x0, 0x0) r1 = msgget(0x1, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000ca8a595e57130f8e526f5f4d1a78272ccc82b283b79399d7044c755522c06092ddcbac56b557477dc6d0648ad8de6d91c4ac822f893695fe2ea7dc72bc64dbf5b2243e"], 0x51, 0x800) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x1, 0x0) move_pages(0x0, 0x2344, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x0) 23:32:29 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:32:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xac1414aa}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0xffffff88, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x500) [ 2533.346125] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0xffffff89, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000002}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001d00001180809801a7b4c7dba09475f251c743092f22d6b509210289dbf185e059187effbf595b418251f37e008aa527829893c0a7fb817662f4dfcca0af271d00ada43269d48b00d6e26f4495ca695e78b7dba837945299a5d7b498ba9bd22c099238b5b1197252954d6c1f7a2b49c3d104cecf38c04960796ba6bac8624bf79cedbd52d336b61746a6c660c69b6a582ac1cbd5a27403d6f42e40b7d8c887975d6358988d12cee73e5895bcfb288723f52e8e03503aaee4ec7f927d1166b457dd7656614e2c99767cce3ce66be52d01d0e47738d9aa58ff982ff6f33bb3b63c6885ff29639a48ac7cef8a7ea7040e07d9c92942e6d5f2163a05efa8b686a24f3f25bfa3f55b17d397"], 0x28}}, 0x0) 23:32:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x600) 23:32:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2533.590346] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="0f000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0xb) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa24e6f917ef01a12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r4, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) setsockopt$inet6_udp_int(r3, 0x11, 0x76c22f49fe20aca6, &(0x7f0000000140)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x20d315) 23:32:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="38000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000003}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:43 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/219, 0xdb}], 0x3) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="746172676574205043493a623a31313ad59cf1063500"], 0x16) 23:32:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x700) 23:32:43 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:43 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000000)=0x401, 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x88001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={r4, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={r6, r5, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={r8, r7, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000054bc0)={0x0, 0x0, "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", "3fc54d4366f83d23edcf260ff070cf60b22e661c8f8abca51bc6f584b85430eb27d50f8ac7508ce9966c221dd7b0b2d22bfafa3649688d4c6ca45bef27589a6d2378acd9b83f0e0b8736310fa4c55cfc204708f89554a210ccf7aaa5b6c8dd6e98f443a9f50562b2efe98b8a2756c6a857b97cb1ab383710cc49332168818d754a2962469477080bfa3033f1aa29679c2e7417dafd7ee6326ce97cdec9cfaa5f617fd99ec866ac3b8994f996be76db7ad5661b24be00f08b6a2ef01c4e995db6d975d5f24135a842aa3cb4bfc9492347d886a73e87e4f461e4832356e6ab1bcbc8bb2cbe2500856a3ca0b9d1ea625e36811a3110e6dc845a72f0fb21734fb62fddd31e228dbb58a968cd404e3d4cc0f6ba00237402e5896ac98815fab7e826c0a2a70d55ca867699ee10cf8888a831827347112afe329ce177e5fe2bc5bc62261facbc075cb876505b69fe0ad0678dda524bdece39508456ab0a455b9cae915d939f079dd315e605aab10502594c431f4bbf313b9a19091c9fa8cf0925aa2c37b1b9a495ebcc56e4e4adb378c154cfed5880e8d3094ddaca198955ac498cdd2303e6348e45c97b96885a829c4d0591dd30479ade8a7d713cbd1b636c8eaceb37add826f48a348d5c30fd0c9b070e7428fc516217519718e9fff4a4996486850932373936f1a89fbc6b53db61dcdf42c9062e23c8918c4eb6ec79d7dc8ee716f51bd59317a329a8efe69d443c08afc342e007389ac870fdf58a4a91dddf827a1f01c6c3db2924ed9ebd1b0a66d3db45f2406d293716c75943793db17fbeb2aac12dda8dd5179efa95443144a975c801ed5ba23836deda2d019e291a2efa9119cca09f8f44c677747226d11936cb6c0f448cfabc972790bb01cba036be568a386af45b49f88b27029f89c1c5a6b9d87c5732abf0edfe7818c2893f9cdbd15bc1f365045aa113185861004b98fa71a588fd6a0cdecae2e8da488e330039652b7429d274f190e4ec30602648a58bc3545542f02a8ad12cc14559a5631e741c9484be515e97f78f59a3121a33e54ec2cb23b47e491136b4d7da0ca5e732a531863ea348e0cceb2e3ec8d74be51095526962ec5c36f9521893b5131dd6ba92d565659db8b6f97acf70b3a7323e095b2702ca53a6a9044bbf1e85d222e171f112eea60ead6c2b4f379c3196e4320e9ce21de92cdb5eeb74b19cf96c864052b8f92bf8dec079c5c6f2368496cede77577abb88d4cdc31491294fe13efa3bccd11ef22db1ec9a4f861e9e29a9129b29bf66880dabb20686472b2808798587ed8a621cfe9c03efb34da574c8742b87496d435e35133f43d293f1976f036b46a635a903031c9d72a9b2e0c9ed85f993355985a84ac0e804af8baaed09cf08f551cb35ef8c06fc94bf759d82a62a0659dbe0c8eb81dc3f3a32a1446924bd9b70e02fdba0ef269bb3d757002f6e6367278480abc3646eebe3bf5769a07b85f2af529e423ea010c4822b8487a5efe5102a72c1a1498d61ee1bcd4a11e85ab39bd6d86ee1ad0cfc8adfdff5f35fdaf125fe434dd055b7ad3cd135bddb85531d0fbb0f9c84f81205016f768e9d5a8bdf0acb7c5b67bc6ed9e6f8138d36ef2c0ee160bb57daf5db899a919f3eb517ee9f5904a29fac64e46e1f15d1664d78e2a2e6c41ae77111493b863fdb9ee525be4daaca316252630a5a3f3b269128d375669e46b544ff5d2bd6b3ce87990b660a95d5857c72a2b8488f16590ad1439bcbb92530528ce4be133e1c31fc3bb2ac8c9291ce9b0ba3b246bfb2ed82beedb544306aa334ac3b8adfe7e099db45b99dcb2508346a52d5649e5a33797dba3fda77fc966760e9ab20ec36e2dc74a3439900a1ce983a15f39781913a4e535746ccff94482f9e8e562508dfc086125da4b5fa75e781259b3a04628a459c1694cdce6b80d957a374d30ef8008d09bc63fca35c9e0320516106e6e46e3cfac18e22536ea9b6c45d51c0cc59268fdf72e3feea975e4debbbe35aa44881339fdc5f5d3be91080caf6b58e537292db4b6408027f0ec7d5f560fd045b3d249972b48d3adf92458dfd822a8e4b42cad3040118c8ac6a4344169e30ff8731f99ac85fb1e9eca404d1a1579b65d06a342966e028706c44dd544eefb814f169c544a2792864bb26111a7e58fe28a24f4aae653b2732b62a70b7b411770b719e1e2bb32dcddd28a0376baf6a1356d9803bcddd2c5e832d5f7190ccc1e692f5e0d53a92681e904d690997206470057f9e7e25fac4f0d9ecf605ee240f677ad801471af22756c7c87296e5c7b1003b2a2bfd3d1cf417c43b32d3a75ed74e38387de4e34c60260477294f4d56be93a0a6f6a9f0677f483411387fd32886ff9b4e2e47415d2a84cb589e333425599c9067a0d3611395d0be382c0e0ec317c60b4500af6410093f8d559c1e82e492e4f617603e94100152e7c6be9c100958e9e6fd2429c3e7923808f4ba4ba4006d7825da11cb8a390615c8d78bfd09744003004a3e8a49fbcd2ea0520f2ba16f3661c95d2cf00520405f4e2308d0db4be1ab6232fc8e86d4f663fba71dc8b66df811d5364751ecb24c3833e7be76bde8220ccc9e689795d7af6ff94fe685a2e258a5a4a534fd0737cd1bca1cdffad8322b08224c3e506ba7b8b1a61e1c60a923d14bf259c0e2e1f537e1f492ee7bcb4f198765d9845e77bbd733f23c38c93a0847836f246e60c057efa4bf0519f7e8886bb12a213830f844bec51433a681af72b6dc25a42eefcd54bacf39c6cd85b45ac094a1f2f1e67077a7629e2ab80666b238ebd503468eb8207406e2eaf4a03ed34698cadb859c39559e23a5567075616e5b19b64023b30836ca90239f5208365fe4c81d6d5c446b67986350b1e80bc8ff2ace5772dd19d6ad03d0adae19e521026d3bbc0782c662b9ad7b3ee06895ce5e7570f6a5fdd09388edbf0f65eb62de549df899062fe1194c633525d8eb8f17148488dd36d292fd75ff1fdc3e2c3bd4929b6c970e6b799f816032d6f02efa79303154aa7196edb5a7cfea68d08fd414ba9bddbc9077eb950fc3150a95ca592b35636f60e515513ca3195b6052aec895fcefda7850faa9f2297580f1290eb0174cf87131c99f5e2bbc3498b10b3994a6bfda31b527ec48e1f5ab8197ac5cb34c665afcbeccf02f02648e6b9ed1fd5f643e01702453e829db1947787e0c3942f6fc67e63fc1847603b89ed335ded6449de76df668e587651033ba96e9c2d2872d90fb742fbd41bd580038569b7dc0f7cfe0c6351458224129dfed90264acc9cc9b3e763521c4616d6630b9541fd7d789f27475c6d1bcec0b725c1f6b3cab08f634ccdc3d2aad2ba1a20612c0db0d6f504571884d21bc01c8dcba3a072ec6aceaa0af365cac4fe7099e0e0ae55dfc10a455adc9387a7001dc2ac0aca92859946420dcb701303e2649ee247f7fcc80b87424d422f0ec87daa28eb1313aa47d750aaeea2937fad4d01e0c044409cd123e7e343541bbd70190b06e46edbb7ce6ce2b7780acd8a7509cd3e19d79f138527280366edbfd5432b67eada9881a8d69a3868acc1709592b4a881cbbd077d970322ca62ae920877f17dbac27eb306db6085b754c4939a96d455b9cb02f45cb74787e1ee259d6721a3b134ff63d781538326a907cc9c395ae6db629de5d07b1aea0b70104bb13ed8b9806c7587b1ebb272dee6fa40fe9c91cfd7f681b6e49506d2e7ef4715ea312fef3d22b283b2ddf6bc9ef42e2570f7af3596c9919b514f8cd18bd11746b06c4d8a6129475b1f8fbd759068bbcbd338847793a5b06b1a307ee7779bdf05647643e5fcb001186ccfe858229cc7d51f65e05b7a20280bf051d782abe3465b39a2eb27ed8241f21b31cbcb9c181498ff8c545dcfb2d5cfd7ac46a3809d5255c65d02609fdc012ee134dedf525d66d64da5ea94670a0435f8d3569e2f3458863ac08f3ca6d2f74baf308c481b6ec3d3e05ba8d51d3aef5a2fbe3f700745918579ba86dfb64b644c9aa0b96a94ee3ceae3695751a616c36b01a87fb3e764aa77f0ef2184c1f4a91663dcb55de108d7f78a72c34fbc390b48bc8fc2f610c553f1a8e424f7df0ab1179fa6688e0078ebbc44a872ec473e5a091f309ded8b7ebb633ac81af15f76b722c19b1c289a3fb87b98cdb26361c535dc9d1c0c3514b7b01739ef07452fb966a61fe4e00d4ac468a2d80f48fd001c122d251da5dd5c79b44ca83b26fce946c4c87edcbca52db6d6ab26fea15bc1cd63ef47faf2d610f7f4a71fa78d71207cbda0615c458de58e68c269ca4066fe8124f82ba93f6522a09f96e4162295bd531e17df40aaa6491ed7ec06e80e911d671638e88053732b5fc3de915074b4db01a9ca12fe2b22287f4f5e10efc4541dcf22046020c7e16dfadbfcc02695be3c81ae4513d742b71c94261b0c82a3ca058db2b093fbdfd72743b66900026441097eb7be4f98ef48ad648ae68b3fb87ab1aa0da57456eef06fef9d8823664c242147a1318b73b4c396934a579c94aef553fd5c879ddc862799ab8a6ab9718632d0d74ce6c84f8feb1b0ff8afb4cbbede3bb06f4b3c25b6c8fc91d953d407ff851fb2a0c50b1bda43d28a9f24445870bdc67ae115170aad477645fc8717738802850829827f0470833fccc3c8e0a41f2016d0e8d7d0df44bd28c593cd39acb03d17009991c713016201ea75bffcc5729db5e55f0e69b6c2568a8f79118ef10ffb135e593269b44bf08b40f7c36be5ae4467b1d0807758a1abbf7bd516bc125063301efe04383e001a3ed4d129a2abbbfcc940b6a718697671ec741a60db9cbf4a9cfdd861e02044fb45eb1796c5a8d8827bf8d9e67d8f08f68d3fea04a1121e6fc616f7a7462dc183deacda81f17bb7f33ae5b2a2d90a279c28410a3a47be1870e9fc13c0635239682f71a215dd7dc0426bdc2008758a46a0b06f00a093d9c29ee9edc80ff2a4b4b740e74e1efb46f347c37abcc0f6a80965c28eeddaed5e49cf337d9ca3b1333348862fc09554cad7eac8bae5c69f8b39843af0e3fcb7e8e94ed97d7607bcb1ed8f8191676cdd81aab05a2a2ebfae6df15edcb6361efa22c15be379aeddea255cef0c603a9f0f2f4cd0c8774da12c5c8a5ce780e7166af856cec0245232dcbce6863a283e3ee1fd794fe5551729ad78a322bade6ab540c4407850e85896e7c310bf90c3602148ea2ddcb2b335c0e134946f5a09c9a8e7395cb38424c3ebe5a8b13176dc9efaf365663b3ee91a57c70e0e2f7eb9a99aa8863af374e92ac67a1cc243304f5c17bdeb881efd9bada7bc432961ace6daa21842becac1229b6fa065d2f3043b558cdf4c537348f6923d65e19424a6dd6f7184486b158e64ac4733aa6c9ff80de68a6e9b539ccc9004397f385bccf311997a07dafca7c2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={r11, r10, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055bc0)={0x3959, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r8}, {0x0, r9}, {r10}], 0x2, "88513706078658"}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x80, 0x3, 0xe5, 0x8, 0x0, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x40011, 0x0, 0x1, 0x6, 0xa0ce, 0x3, 0x401, 0x0, 0x7c, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r2, 0x8) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) bind$packet(r1, &(0x7f0000000200)={0x11, 0x1, r12, 0x1, 0x4, 0x6, @remote}, 0x14) [ 2546.937387] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:43 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950a0000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x900) 23:32:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14020000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x0, 0xe1, "c651969118d146837e74a1d8e2bba3bfdc8dfbaf8ca88cb875b168c7624b81be39fa83d7cd036bcaf36f5c09cfc159dd8998c3482e8e02ac6e9f76dc81cab0e64ef3e75373b8a1d18c299d3cd162c9b9bb5080c3ba774edfae91194bcbdeaa3609f5f86ac555cb5e472ecdc4e420c5504785abf7bd3ca34d252ba385e0483f621979d22480439ef86d040ec1e83aef926cea8589f3c306b87bf69bc05998a1d8f614dd22f493bbf07d14241e2b30dfdf888811aa330efc20e61001c2f26dc859931e6e0855975e90721e73ea2c9e8d75ed55a45d1cf5cd81d1669b3b16b718a7a2"}) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000080)='./file0\x00', 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000240)) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 23:32:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000004}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:43 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x4}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80800) fallocate(r2, 0x0, 0x1e, 0x80000001) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r5 = epoll_create(0x7ffd) readv(r5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000001c0)={{r4}, r6, 0x8, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0x80, 0x1634, {0xe, 0x10002000, 0x1d90e0000000000, 0x9}, [0x5, 0xd, 0x10001]}}, @name="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"}) [ 2547.139181] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:43 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:57 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:57 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000f42be9d5e999b8fb09817a1372334c92f0d0366787e692e00e4f5eba9f6ed2c431403f7b9eeacc180f357a2ed6ae4f2c000000000000000000"]) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/94, 0x5e}], 0x2, &(0x7f0000000280)=""/205, 0xcd}, 0xbf}], 0x1, 0x10000, &(0x7f0000000380)={0x77359400}) 23:32:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xa00) 23:32:57 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:57 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000000)=0x1, 0x4) 23:32:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000006}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2561.378855] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:32:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:32:57 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:32:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14040000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:32:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:32:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 23:32:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xb00) 23:32:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000008}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2561.827089] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14050000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000010}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000, 0x0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:17 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:33:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xb01) 23:33:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2580.850551] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) unshare(0x48020200) 23:33:17 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000080)={0x0, 0x3, 0x0, [0x8, 0x6b, 0x6, 0x27, 0x1000], [0x6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2465, 0x2, 0x5, 0x4, 0x1000, 0x1, 0x1, 0x100000001, 0x3, 0x7fff, 0xffffffffffffffff, 0x20, 0x200, 0x453, 0x100, 0xffff, 0x7, 0x7, 0x400, 0x18eb, 0x1, 0x3, 0x800, 0x1, 0x6, 0x3, 0x7b, 0x1, 0x9, 0xffffffff00000000, 0x7, 0x10001, 0x20, 0x8001, 0x9, 0x2, 0xb400000000000, 0x9, 0x10000000000, 0x40, 0x3, 0x211, 0x2, 0x3e, 0x2, 0x8, 0x0, 0x952, 0x1, 0x3b19e12, 0x1ff, 0x800, 0xff, 0x3, 0xfff, 0x5, 0x6, 0x100000001, 0x0, 0x9, 0x3, 0x5, 0x5, 0x100000000, 0x1, 0x401, 0x5, 0x3, 0x4, 0x2, 0x100, 0x3, 0xccb, 0xff, 0x4, 0x10001, 0x87af, 0x4, 0x6e, 0x1ff, 0x7, 0x1, 0x3, 0xff, 0x627e3ec, 0xe4, 0x4, 0xea, 0x3, 0x5f76631c, 0x6, 0x5, 0x0, 0x401, 0x1c000, 0x4, 0x34e2, 0x867c, 0x4, 0x1000, 0xfffffffffffffffd, 0x6, 0x2, 0x6, 0x35b, 0x10000, 0xc7e, 0x10001, 0x4, 0x2, 0x8, 0x2, 0x8, 0x3]}) r4 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000008c0)=0x1c, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000004c0)={r3, 0x3, 0x2}) 23:33:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xc00) 23:33:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500), 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14060000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000011}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2581.184243] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500), 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000021}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:32 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x3, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:33:32 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14070000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xd00) 23:33:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:32 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x4, &(0x7f0000000340)={0x0, 0x3c, 0x4}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_gettime(r1, &(0x7f0000000180)) timer_settime(r4, 0x0, &(0x7f0000000400)={{r5, r6+60000000}, {0x77359400}}, &(0x7f0000000440)) timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000100)) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={r2, r3+60000000}, 0x0) [ 2595.927712] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500), 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:32 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14080000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:32 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000140)) pwrite64(r0, &(0x7f0000000040)="0a883b7171ea68b78260ab1b26e4ab3e6ee45f7df6b4afc004e093903e333b27388bf76aa7c1444037d7404de013b02f9139e000687546bec6a3c8ae3b5cacd6fc3b9cf9f5f389987e1bfb141c04618cd585cb3b1fd9d702fd9b8733798dcfed5af44427f5deb47d1e599290fc926aaccaad028d32ad51125f56a0896238002e47f6d9d93603c3c5f27af52b32fd72746faa4e97f414c443d3895078038d980a6803899870080c76264ec5ba9a7c553f1f8cce769d158ffa9dcdff3415aeef26cd71011bda3fd958d2914184ee3931942df689fa814a96dafc1aec3f7d5111821c991aa6420962aaf8e00c39cd4dfbb0b00a483bf1", 0xf5, 0x3) 23:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xe00) 23:33:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000029}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2596.155952] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:32 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140a0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe000002b}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x9, 0x4, 0x2, 0x6}]}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x7, 0x2, 0x2, 0x80000000}, {0x2a4f, 0x9, 0xca, 0x4}, {0x7ff, 0x36, 0xea, 0x2}]}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x104010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) r9 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r12, r11, 0x0, 0x1f) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd=r9, 0x1, 0xda, 0xb2e, 0x2, 0x0, {0x3, r10}}, 0x81) 23:33:45 executing program 0: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xf34}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x3, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="089d5a61a986feee9323e9af4e756d1c9ad7b73862094733da8873301967a1dd8124ff95a1e8d101edf35917a9cf251b71fbd2783e9d4040fb7bf13ada8819516a4b13277bc3a65161df63f466995437d5bf25cb4146929ba4acd97a6651db9b22aafb67cef6c43c29c29f2b80651c662094d6ce859d29af61ae36cd3fc1496f67df8f88638e713e520422dac6cf55ecd822cd16958fa6c8f38f62eeed906379e9212b9c39e8363a4a1a2e3568de1b0ae243116cde0eb58fd4a553e1d2bffd21b16fe286c7aa1834cf98908be94961f2a32a718d1c2bc5ac588ffc7fc2afcb253cb714375ad995", 0xe7}, {&(0x7f0000000500)="5f24cef43cfe1aee2019681e1eed47536dd4f5579ed5f11fd8bc0a4b41ded29eeaeeb2ba1765b4ba29a02629117bdf05c58fd00bd6aff3d0e97181f147792b24eb6d6e9f39641461da0de9a03c375b3706941c2ee6b2a608911cc81b965b2b7500e1437e5b5431809b822e63307ce7037c65087ef906bfada661b0117863d8e439b0bb7d614a699b6c3c4895bf524591e396221c663354dcde00151e3d91e1c95296cb6b5b8b7a9c6a71ea8f6e9864c9ba547a96234f44e6083233860e0ca4b4ee60ffed52d23415a14cc7b420d5c08dd0a8ca806d", 0xd5}, {&(0x7f0000000040)="cb7202", 0x3}], 0x3, 0x4, 0x0, {0x2, r4}}, 0x77) sendmmsg$inet(r7, &(0x7f0000005080), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000005080), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, 0x0) syz_mount_image$vfat(&(0x7f0000000240), 0x0, 0x0, 0x1, &(0x7f0000001600)=[{0x0, 0x0, 0xf9}], 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15, 0x1, {0x0, r4}}, 0xc6e6) 23:33:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140e0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xf00) [ 2609.325430] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14600000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2609.584519] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2609.623178] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:59 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x296782, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) 23:33:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1100) 23:33:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:59 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14fd0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe000002c}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:33:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:33:59 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0xfffc, 0x4}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x6, 0x1f}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2623.310141] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2623.341674] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:33:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:33:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:33:59 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:33:59 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14f40100000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2623.582561] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1200) 23:34:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe000002f}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 23:34:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2623.726894] FAULT_INJECTION: forcing a failure. [ 2623.726894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2623.729078] CPU: 1 PID: 14575 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2623.730462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.731820] Call Trace: [ 2623.732278] dump_stack+0x107/0x167 [ 2623.732883] should_fail.cold+0x5/0xa [ 2623.733537] _copy_from_user+0x2e/0x1b0 [ 2623.734259] perf_copy_attr+0x11a/0x8a0 [ 2623.734918] __do_sys_perf_event_open+0xb9/0x2e60 [ 2623.735737] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2623.736542] ? perf_event_set_output+0x5b0/0x5b0 [ 2623.737329] ? wait_for_completion_io+0x270/0x270 [ 2623.738193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2623.739067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2623.739918] do_syscall_64+0x33/0x40 [ 2623.740544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2623.741401] RIP: 0033:0x7f5ced6c7b19 [ 2623.742038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.745074] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2623.746361] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2623.747752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2623.749265] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.750482] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2623.751662] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:34:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000032}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:14 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000007f8000"/88], 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) msgget(0x1, 0x608) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) sendfile(r6, r7, &(0x7f00000001c0)=0x9, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x7, 0x0, @fd=r6, 0x20, 0x0, 0x442f, 0x5, 0x0, {0x0, r8}}, 0x918) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x110, r7, 0x0) 23:34:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1300) 23:34:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) 23:34:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:34:14 executing program 0: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="0de7d19bf61ca478e6002d04f1ef5f92df2e5cfc2fc81472feedd5075bf6d9538fdb901aefb65873b7fb936298223d28aeb3bcb66291aa36c11fd49fd5e4def4e63923e8c874a203f275668f6889c8ecc278c0017ff1e31a43f93032696d3a21b6f92935e21bfc925c93d5851e2b1f33df94f9fba0", 0x75}, {&(0x7f0000000080)="f8512afc035b4d15e41750c1b6c494c2ecaddf8e2b4af89301a5e7f66be22920d4a16653b900d19dc8f116fd45485e218c962ff6acf65778a90b3f91fef6765ea448646c809666953015e7e68f0c88b0898bc48be7f9bacc5594d73111de2a7929b81a1f9d29ad9886bf0a3c397bb2038dbc9e8a9add55c2baec523bd0cab85a7a38c9aef9d76d3bce129dfc1b9e124c88381a15e47baac0793a06b558bcf3313dcd35bee5c2672750001c", 0xab}, {&(0x7f0000000140)="d7e75543ffdba51c56637787628fa29d74bfbe836668ba2cc5dfbb74126b86b8cf26e02724e0aa81", 0x28}, {&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000280)="514b167057d94eabebeba2a0ac667d96f7ac17ccb1cad0b71ed732736de9aceac38dd02c26b3017c4debf2525092693568f9bc1eff4d827ae48d80a9075a39ff07438c1ae22571aa31008a71dcb2e69eb336e816fa34", 0x56}, {&(0x7f0000000300)="988a", 0x2}, {&(0x7f0000000340)="d267fd2eaef088", 0x7}, {&(0x7f0000000380)="54f96de3dabdd3847e2bf2b0bf0fb49a84f140c0945d37ab1ed1319ea6d46151d1829c8f6a69ccfab003015c33ebff7118d89c1ccacdd1cffe5e53e5a540f4ab4bd1e70b85e036996cbb030e07da04c1e96c111beb63465383fe39bbcfdd9a739eb349360067c166", 0x68}], 0x8) fallocate(r0, 0x1, 0x7, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd609615174d4df2f85f19bf2e1f2000000000000000fe880000000000000000000000000001ff02000000000000000000000000000186009078030000080000000000000000"], 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 23:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e70200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2638.156625] FAULT_INJECTION: forcing a failure. [ 2638.156625] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.158177] CPU: 1 PID: 14598 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2638.159059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.160093] Call Trace: [ 2638.160448] dump_stack+0x107/0x167 [ 2638.160912] should_fail.cold+0x5/0xa [ 2638.161406] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 2638.162028] should_failslab+0x5/0x20 [ 2638.162539] kmem_cache_alloc_trace+0x55/0x320 [ 2638.163124] perf_event_alloc.part.0+0x5b/0x2b70 [ 2638.163732] ? __alloc_fd+0x2b8/0x630 [ 2638.164234] __do_sys_perf_event_open+0x579/0x2e60 [ 2638.164866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2638.165486] ? perf_event_set_output+0x5b0/0x5b0 [ 2638.166087] ? wait_for_completion_io+0x270/0x270 [ 2638.166742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2638.167409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2638.168071] do_syscall_64+0x33/0x40 [ 2638.168551] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2638.169201] RIP: 0033:0x7f5ced6c7b19 [ 2638.169680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2638.171964] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2638.172931] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2638.173815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2638.174703] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.175580] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2638.176470] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2638.203044] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000033}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) 23:34:14 executing program 0: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[{0x0}], 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x1) 23:34:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1400) 23:34:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2638.422075] FAULT_INJECTION: forcing a failure. [ 2638.422075] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.423422] CPU: 1 PID: 14624 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2638.424125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.424961] Call Trace: [ 2638.425242] dump_stack+0x107/0x167 [ 2638.425613] should_fail.cold+0x5/0xa [ 2638.426011] ? create_object.isra.0+0x3a/0xa20 [ 2638.426497] should_failslab+0x5/0x20 [ 2638.426888] kmem_cache_alloc+0x5b/0x310 [ 2638.427307] ? __lockdep_reset_lock+0x180/0x180 [ 2638.427779] create_object.isra.0+0x3a/0xa20 [ 2638.428228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2638.428748] kmem_cache_alloc_trace+0x151/0x320 [ 2638.429227] perf_event_alloc.part.0+0x5b/0x2b70 [ 2638.429708] ? __alloc_fd+0x2b8/0x630 [ 2638.430103] __do_sys_perf_event_open+0x579/0x2e60 [ 2638.430626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2638.431121] ? perf_event_set_output+0x5b0/0x5b0 [ 2638.431604] ? wait_for_completion_io+0x270/0x270 [ 2638.432117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2638.432652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2638.433182] do_syscall_64+0x33/0x40 [ 2638.433562] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2638.434096] RIP: 0033:0x7f5ced6c7b19 [ 2638.434490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2638.436299] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2638.437074] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2638.437795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2638.438520] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.439237] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2638.439961] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:34:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:14 executing program 6: shmget(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2638.542248] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2638.568940] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe000003a}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, 0x0}, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:34:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1500) 23:34:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140d0300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000001c0)=0xe8) bind$packet(r0, &(0x7f0000000180)={0x11, 0xc, r5, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) [ 2638.724848] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) 23:34:28 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) 23:34:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe000003c}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, 0x0}, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:34:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f0000000600)='#\xa8\x7f\nI\fQ\x90\xcfI\xca\xd8\xb3\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7, 0x78, 0x6d, 0xfffffffffffeffff, 0x3, 0x3e, 0x8b, 0x353, 0x40, 0x40, 0x0, 0xffff, 0x38, 0x2, 0x401, 0xffff, 0x3}, [{0x2, 0x4, 0xffffffff, 0x10001, 0x80, 0x5, 0x4, 0x5}], "095e4327bae74e0d5b66753ec0740a62640439cf66b882a638eda0b9913ede2e95f4ef7a4bcade8fed19cf5ebc5dcd0194aaddbf5ed61eae27a81247e35bef89b2a3364b5fd11951a24769a4891a78429a63d81ba0051b1c1af62869cb1b70589890a484dfef4dc867390057342df08adc5b0abc2a1afc651fba03961d3a41c0f2a5748a8b23605b81030c6fff8777814a6c1db17a24251b92c5b44da7ded8b147582a6f2b2e9894810b18dff62ac26411edc4a896dd3d7fcb9c049c15a01fec6d9c53aeef97b20494af134526e8f2"}, 0x147) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa0b7, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000017c668351fa956206db3a7c28227a4688e20ab445314145b2198ae128aafa5360eb904d665456a93029c1cc0b8948a5a4ee984", @ANYRES32=0x0, @ANYBLOB="0c00990040000000020000000a00060008022f00000000001dd22717211ffd556fb64c63a2401a5183b7671b1c64f8e4f704721b9ed350e25ba66a9492945648485a8e401851057b918f1b6e3c825368371ac9a97faa452afe406465b9f7c4a4bfaf5bea6df4ba6bde93e1ee1dc0c76bce81"], 0x34}}, 0x880) 23:34:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1600) 23:34:28 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e80300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2652.456984] FAULT_INJECTION: forcing a failure. [ 2652.456984] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.458752] CPU: 0 PID: 14775 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2652.459620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2652.460541] Call Trace: [ 2652.460843] dump_stack+0x107/0x167 [ 2652.461246] should_fail.cold+0x5/0xa [ 2652.461703] should_failslab+0x5/0x20 [ 2652.462130] __kmalloc_track_caller+0x79/0x370 [ 2652.462650] ? strndup_user+0x74/0xe0 [ 2652.463089] memdup_user+0x22/0xd0 [ 2652.463488] strndup_user+0x74/0xe0 [ 2652.463899] perf_uprobe_init+0x6b/0x210 [ 2652.464358] perf_uprobe_event_init+0xff/0x1d0 [ 2652.464869] perf_try_init_event+0x130/0x570 [ 2652.465386] perf_event_alloc.part.0+0xd96/0x2b70 [ 2652.465932] __do_sys_perf_event_open+0x579/0x2e60 [ 2652.466510] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2652.467047] ? perf_event_set_output+0x5b0/0x5b0 [ 2652.467585] ? wait_for_completion_io+0x270/0x270 [ 2652.468161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2652.468747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2652.469337] do_syscall_64+0x33/0x40 [ 2652.469755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2652.470325] RIP: 0033:0x7f5ced6c7b19 [ 2652.470749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2652.472791] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2652.473657] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2652.474469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2652.475260] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2652.476051] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2652.476864] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2652.499829] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:29 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x11, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) 23:34:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) [ 2652.701726] FAULT_INJECTION: forcing a failure. [ 2652.701726] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.702943] CPU: 0 PID: 14899 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2652.703561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2652.704301] Call Trace: [ 2652.704556] dump_stack+0x107/0x167 [ 2652.704881] should_fail.cold+0x5/0xa [ 2652.705237] ? create_object.isra.0+0x3a/0xa20 [ 2652.705644] should_failslab+0x5/0x20 [ 2652.705974] kmem_cache_alloc+0x5b/0x310 [ 2652.706341] ? cred_has_capability.isra.0+0x143/0x2b0 [ 2652.706821] create_object.isra.0+0x3a/0xa20 [ 2652.707225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2652.707788] __kmalloc_track_caller+0x177/0x370 [ 2652.708209] ? strndup_user+0x74/0xe0 [ 2652.708545] memdup_user+0x22/0xd0 [ 2652.708869] strndup_user+0x74/0xe0 [ 2652.709215] perf_uprobe_init+0x6b/0x210 [ 2652.709590] perf_uprobe_event_init+0xff/0x1d0 [ 2652.710002] perf_try_init_event+0x130/0x570 [ 2652.710418] perf_event_alloc.part.0+0xd96/0x2b70 [ 2652.710866] __do_sys_perf_event_open+0x579/0x2e60 [ 2652.711315] ? perf_event_set_output+0x5b0/0x5b0 [ 2652.711748] ? check_memory_region+0x198/0x1f0 [ 2652.712168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2652.712641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2652.713130] do_syscall_64+0x33/0x40 [ 2652.713454] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2652.713897] RIP: 0033:0x7f5ced6c7b19 [ 2652.714244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2652.715883] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2652.716557] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2652.717194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2652.717826] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2652.718457] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2652.719100] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2652.737291] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) 23:34:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, 0x0}, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:34:44 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 23:34:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:34:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1700) 23:34:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000500}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:34:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0xbc5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xb80, 0x0) lseek(r1, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(r4) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0x5, 0xc4, 0x4, 0x0, 0xffff, 0x30c0, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x8}, 0x43002, 0x7, 0xfffffffc, 0x1, 0x800000200, 0x3, 0xd, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x3) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, 0x0) lseek(r3, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x46800, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x200f5ef, 0x0) 23:34:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14c00500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2668.136006] FAULT_INJECTION: forcing a failure. [ 2668.136006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2668.137909] CPU: 1 PID: 14915 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2668.139038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.140383] Call Trace: [ 2668.140926] dump_stack+0x107/0x167 [ 2668.141673] should_fail.cold+0x5/0xa [ 2668.142362] _copy_from_user+0x2e/0x1b0 [ 2668.143026] memdup_user+0x65/0xd0 [ 2668.143609] strndup_user+0x74/0xe0 [ 2668.144201] perf_uprobe_init+0x6b/0x210 [ 2668.144989] perf_uprobe_event_init+0xff/0x1d0 [ 2668.145930] perf_try_init_event+0x130/0x570 [ 2668.146660] perf_event_alloc.part.0+0xd96/0x2b70 [ 2668.147456] __do_sys_perf_event_open+0x579/0x2e60 [ 2668.148261] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2668.149043] ? perf_event_set_output+0x5b0/0x5b0 [ 2668.149806] ? wait_for_completion_io+0x270/0x270 [ 2668.150616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.151471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.152316] do_syscall_64+0x33/0x40 [ 2668.152920] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2668.153839] RIP: 0033:0x7f5ced6c7b19 [ 2668.154518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.157583] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2668.158825] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2668.159986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2668.161135] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2668.162284] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2668.163453] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:34:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2668.169381] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:34:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) 23:34:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x2, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2668.384499] FAULT_INJECTION: forcing a failure. [ 2668.384499] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.386733] CPU: 1 PID: 14933 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2668.388009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.389616] Call Trace: [ 2668.390123] dump_stack+0x107/0x167 [ 2668.390853] should_fail.cold+0x5/0xa [ 2668.391493] ? getname_kernel+0x4e/0x370 [ 2668.392257] should_failslab+0x5/0x20 [ 2668.393051] kmem_cache_alloc+0x5b/0x310 [ 2668.393708] ? lock_downgrade+0x6d0/0x6d0 [ 2668.394381] getname_kernel+0x4e/0x370 [ 2668.394993] kern_path+0x1b/0x40 [ 2668.395542] create_local_trace_uprobe+0x86/0x4e0 [ 2668.396320] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2668.397060] ? memdup_user+0x7c/0xd0 [ 2668.397669] perf_uprobe_init+0x136/0x210 [ 2668.398392] perf_uprobe_event_init+0xff/0x1d0 [ 2668.399216] perf_try_init_event+0x130/0x570 [ 2668.400000] perf_event_alloc.part.0+0xd96/0x2b70 [ 2668.400875] __do_sys_perf_event_open+0x579/0x2e60 [ 2668.401803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2668.402556] ? perf_event_set_output+0x5b0/0x5b0 [ 2668.403330] ? wait_for_completion_io+0x270/0x270 [ 2668.404136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.404979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.405819] do_syscall_64+0x33/0x40 [ 2668.406422] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2668.407254] RIP: 0033:0x7f5ced6c7b19 [ 2668.407857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.410798] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2668.412026] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2668.413170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2668.414318] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2668.415466] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2668.416615] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:35:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14d80500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x3, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) 23:35:00 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) lseek(r2, 0x0, 0x3) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x8, 0x9, 0x2, 0x800}, {0x3, 0x3, 0x84, 0x2}, {0xf001, 0x1e, 0x9, 0x401}, {0x4, 0x6, 0x2, 0x7}, {0x20, 0xa, 0xda, 0x2}, {0x0, 0xb2, 0x3f, 0x4}, {0xfffb, 0x1, 0x3, 0x982d}, {0x5, 0x1, 0x1, 0x80000000}, {0x4, 0xf2, 0x4, 0x3ff}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 23:35:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1800) 23:35:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000000)='./file1/file0\x00', 0xb1) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_complete(0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) fcntl$setownex(r0, 0xf, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xfffffffffffffffe) [ 2684.087385] FAULT_INJECTION: forcing a failure. [ 2684.087385] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.088572] CPU: 1 PID: 14949 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2684.089277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.090115] Call Trace: [ 2684.090392] dump_stack+0x107/0x167 [ 2684.090765] should_fail.cold+0x5/0xa [ 2684.091165] ? create_object.isra.0+0x3a/0xa20 [ 2684.091634] should_failslab+0x5/0x20 [ 2684.092024] kmem_cache_alloc+0x5b/0x310 [ 2684.092449] create_object.isra.0+0x3a/0xa20 [ 2684.092898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2684.093406] kmem_cache_alloc+0x159/0x310 [ 2684.093839] getname_kernel+0x4e/0x370 [ 2684.094239] kern_path+0x1b/0x40 [ 2684.094584] create_local_trace_uprobe+0x86/0x4e0 [ 2684.095088] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2684.095562] ? memdup_user+0x7c/0xd0 [ 2684.095944] perf_uprobe_init+0x136/0x210 [ 2684.096371] perf_uprobe_event_init+0xff/0x1d0 [ 2684.096843] perf_try_init_event+0x130/0x570 [ 2684.097285] perf_event_alloc.part.0+0xd96/0x2b70 [ 2684.097898] __do_sys_perf_event_open+0x579/0x2e60 [ 2684.098450] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2684.099066] ? perf_event_set_output+0x5b0/0x5b0 [ 2684.099707] ? wait_for_completion_io+0x270/0x270 [ 2684.100225] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2684.100744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2684.101263] do_syscall_64+0x33/0x40 [ 2684.101756] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.102274] RIP: 0033:0x7f5ced6c7b19 [ 2684.102735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.104773] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2684.105545] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2684.106262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2684.106993] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.107685] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2684.108383] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2684.116888] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2684.128092] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2684.162189] EXT4-fs warning (device sda): ext4_group_extend:1812: need to use ext2online to resize further 23:35:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1900) 23:35:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) [ 2684.251553] EXT4-fs warning (device sda): ext4_group_extend:1812: need to use ext2online to resize further 23:35:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e60500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x4, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1c, 0x0, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) syz_mount_image$vfat(&(0x7f00000012c0), &(0x7f0000001400)='./file0\x00', 0x80, 0x6, &(0x7f0000005840)=[{&(0x7f00000046c0)="65a42c75719154fa6d92f10670afda4a5a278dc0893b3996b9243939237bc67fad07d3c5b48df0284f983e60c2cb35c350a457263fc28a500ebe8614b93a230534d6bc444e93c149d50312d1ac314f140064e35590d253dc134206064c876fd42308e66c07decf1c63ba03d857a785ebd59afdd5e53b595fef975c168220465a41b4449d6eb6ee9f07530510bf79be91af90680f1a169452dd4318ea4ec45257592632bef0baedda3a4acf25e309a752e1f10e163e8c5823f93fa6502277f6f689072488212bf0ed5e8d4e2fca76bb0e7d6a1b21759d1fd0832149a6fad18901686f", 0xe2, 0x2}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f0000001440)="b451d0ab0817f4c1c0f2103979c90316a8bfe2a01fd8d092115ae0df4a3d5250220400", 0x23, 0xa09}, {&(0x7f0000001480)="fd98f252ca410b8ab8e1371426ad1f6d26fbc835", 0x14}, {&(0x7f00000014c0)="ae287196990bc82bfd3e5065e336fafafb5979f3f09a4d1a8bdfcb7551a1c378", 0x20, 0x800}, {&(0x7f00000057c0)="13ad4cbb8680491dbcd56cf8f9ad5d70cd32ed463d4be8d1ba7797d0d5566b85e1fffdd1961580e02c62215438413eb4caca6e8be2b6220abbf66d41dd1b056c8a80c0a97b66a0", 0x47, 0x200}], 0x10000, &(0x7f0000005900)={[{@uni_xlateno}, {@shortname_win95}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@rodir}, {@rodir}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_lower}], [{@smackfshat}]}) r3 = dup(r2) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001340)=[{&(0x7f00000000c0)="66cb7469a5b6157126b68dbc785fbf2b0a6a75f9ae49843adc304093de450cc7cab2939a2163b94980f524a12b74211a613248d224a7f3f64b25b4c33488b9c5319ea080dfd1f9eecbb297fd52ebba7cc50709782e8c9b2f12aa7f4a2ec80ac61e2a1ff48e628bd94fdfa5b31f24f6a59020fd2af247face9f42c7cfcd12e875ac86035160fb1204053a4222ece71952987874342a3eb50eb1dcd0a64fad9b61d27acbf783aa650d11b44922fc9ca4981ebe6c7a46b42acca12564a803dc091d9f306b62a679", 0xc6}, {&(0x7f00000001c0)="80271769ea711396880cfc2818f8d930d7d0052542c7a55f7174ce4c", 0x1c}, {&(0x7f0000000200)="2fa1403c097a1105f05b5ccf4daad1e024ee1969deef47192fbc28008bc0847eae102212ac030610624820fd5bfdd4cec08331a656e3d48646f504046d5aa9cdb58d0f2b494ef8506c659d6413e7da47e3ebfbd032715621e3f51b3bdeaa", 0x5e}, {&(0x7f0000000280)="ae1754668b9f059c41c2bbe14703cf846e74841999b03ae8132e2fe69202cedd68b7632184c0d35390aa8a6b95b374", 0x2f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="853f505df59923964c7d26d24b60cb8338d0346bdb3056608441b6acae436101fa8edf786c", 0x25}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="b7e2da6ef5e9818f656ac04a4a6dca7c79032e346e47bad951f19623815495c793afe0103291074f8f2e3cfefc1ba6f0eedb4eeff141b072eb55da94948f89011788b45b2580fcdedc7a7aa1393cbf78dae449a07c974f73362d90ae3c5f0af02b39edfdddf790d1ff0347521cd720387a19187afbd420eb172dcccd2d84e42dfded7b6e9ea8eb51af6746edbf66a6489b1350df50a8bcbb17b5305bad0b0ed4a0307b820723e5cf39f5461b0c96dc5eed5d682a5fabe105e4848ce9e31098e24f825d62403704c7e3575b9770329cac277e8e7bdd702ba58d7150a6aa5b8ba5dd8a9770fe91f03396da343fbd9cc4aa24c03151e5d706defb7760cc20f165db1a594f3dae70ffb9e70c9079e46bd308ca5b5c95178b2198310476e10db3151cf7259dd7b75b85096c8cad7fa98eb34f6479df58661d3e3f2177f69dff3d6b9d8238f46ce7793d0d8c47cb2ec330a4c6a44e999611c7bb84d816debe45cb9929f94e5fb1d63fb14532bee4564c6b3c6654486ec23d1b81b6a3e0bff8d24b68a1c6b555a0b117289b3b5d0111a24256a31c14cdbe1986004dc7e716a542ba9187f2ea366938809a978d96209b8ed83a78f0165ce27982e135627ce3c448ec33c99c8f8aae95769c7c9b0c064eabf073589d42de04f3d915cdb5f0fbbcf9400ee0467a05924021b8bafe45f7ee589ea6473b05d19cd7dfeaab901c0f8ecaa8ba9799e86cf1aae0e630608a802b2bbb30b975866194f3dfd283f8811ad31090cf4623bb35237b9b6a5881254fc871f26485c59194d417da7cd99e953e91c41630cd2e3921af91fbede2eab319626a59bd7d7149e225a976c1e56b226f57ba47e25ca87fbc8e80925720ee9861282c0f48132c2882cef890190237c8e265aae133d0163459a053456b11e4dfdfbc14793c577d15a546e1628a14f016f295a02c446d2bd070f23e1664ddc741884fe101336c6c3c8ab20087f4d0c41e455cfb99c966b1dd143ada0953e039aacfff9c6825aee2b50a8583b662b3a967da34d2901d714518b07dacde2ac535fcddba22a088a9f49759563bfcddcf702ea0a5fa66724778b788d8c0bdaf23a0d6371b24a607a7f40113cc9c8be6cbb5ed73643bc39e7f3cd3e8a2cbf7a6b5db53188b05ac3cf7c4b1361294a740f7c9d1ccfa23fd9742105d019266070d13b3d2d4fc2e88c1548e608b078697dae95a4b803a53cf34d8d7c1869196a92fa8f2fc9c54c38d50acb80514d41aa12a892564796edb412c4038caff3a2a7d9a858ee4488bf35d30984af68dc0be92848c88db7ddefa7f16be9072818cbf1e6f165bbc44b6c645f2e8bbc46782baf99a3df3a500ce1b7b2b2cbacced61f2b2cd268fa87491c838ff1dae209f52565bc0f7c1f8a2a14b040aeb643755bc9dac529e11aa797d7729343a8513d6c903ad2bf2ac4ba11f75b4287b932a0091d6d5936a6690c92f7d34df625ed49a015aa1f311a0849a80085870a3377eb0a843380781d8bc3b1f55af1c3bc11ad7dc7be1c55ba5d60f11cb138d8371ca4477344c613e3cc0c02498ca44d347e2fad97150b39d2fc3609ea4e8205a3dfa5135e76dc83a73da76abf68389aa5e38557a70682c27290ccface493d47468ee298f6f85f9acae752deb6140c7f2d2cd9f1614a656391acd760ca1242b5fd16ba51ebbac756f40a23de737b7fd880872982b038004da39cb14fefea9a29b677753e715111a88d554cd2dde638e58543d9ae5f20bb405ef710e1e72fc08165208c0f397c16da5d6a0b4b71a875c8800097d371e27c042b4034019a9bb965f0af50514e0688af334359b8321a82094b71edc0119caa65888acedc4c8479a9040730f740bae822cbb6f8336e92d0652594103335fa6ecb1e9b3f00eb072206253729783bba6a6fa58839131b154bd811aca207f74111cd26cdd65ba8b0b12bd8bcfbbbb972074547467df8545ab90145c50c6edc1ce397d28e63fb26f9403c57d47da2172161e077a4197d558218a98269e01bd36af7cc27d7a6f50e8f983d850d360051e22ba0a0beec9a4956279b9bf5c732bb69595cfbac1dd91b76c8fd4498e032ed43229f6d7d520d88c4e565aa07b4c6e88409b3fed4fc3a96f0aa3c7225478c4638d9143e938fd027ca394530cdfc87e851c4ef681547eae363046ecfa81953d568e3e1cfff8b9075f9ca451247177c00e7aa67e983504b6fe4cd5db60a480cfb3e7f13600fd3db5fdc86449b0e0c565d0cba543255e10cf3bf3196a89aefda0dfb144fd5b62306837e4ada575293c9b31e6995346f9a306e6d9cf50ab1b5cf655087c8362360ce3ef6a6e709125d1165c8a3214d80ee7e7ddb54fc8930cf90926c9501139640594618bcfc5e0542356023772c4de895363e9e6a4fb636a16350a98eeb9833d9f081b2dcccbba4aadd155d1bfeacd6c8d6d8db5bdb6b311925a987ed008aa316dd3154016ee0d9e097397015a5203a681056b60c3be49ca0bbbf381ec49b51a3a24ea36fc7595c16b8d6bb9c6ab105f449e26a70266beb1fe842bfa8b8f99bf3bb66633b84e5e93ad98be5a6877e713f7b7b001370cc978588dd228027bd36662e21a8da52a19fa8972da68ece1a70f1bafb105deb75271d35c263d717ce3da152a57977c197307e51cc8a0f3f8019c7cd924ce44b79b7b3e1c04bbdacd88e17cc4af066e866f881c75c1fc60052f4ffbd42a89fbafe4a099dcc4dfb7ee835c45d115e407a80a964058af137a39c42a72b50781ed223777d8defda932ca476fbb05b7a667bfc583e98a47276a5b96e9f82a142dea589a760544f2ca253451adf1d2191ec919077aff5329d2fbf9efe9e3dc6719059435e8c07b8ab609d5949b7cda26f5f9e95d4a87426b6f446ac4246b231d6d0f4c49f5c68aaf26c4d29ada04da01a060c2c231ddb41ac0ca46507650f222f60802dd62c281cbe751404c08eb8306075cd88815e6e1cd6d68f0ca9610d1ecbe54c77e92bfecff6babd619a41198534659ea961af059787533f2d062894c5b9d83779b09443baa06bcf3f1baa3db76c9206829133b4c96aa3a72028c987b1185e2ce2aef57d05db33261026c05f89c8fd3ac8fa90569a86a22dd4d942b80c52e4e91570837200af310d59bf593aa9ab427634c731309c597fc78c4ea76a1df86f713da227a3f93c3abcd91a3cde795829e7c7d6c8c62cf25dffe433995cf8868e65c260183251d79e3355df57e446836dee5e8593fc2b3fc7ae75fe8fe66c0cbf05c53737f92db5929c8a7632d8650ea39c997f7c71c5b6f10923e2747918fbe5714d4558c7632eac97477be4a663339e416a0e6d65983263a55e7ce0d56e4c9c5a5a293d1d963b9b61d0b05bbfa08e834ea89ea1f2ba6c617bc365e43383f56ac189c949f1b540404ccb10c19f08014ebe20a48a20296137da407e87254ddaed5eae182a00d7499260dd9656eb208b6affcc9b46232384a94d9701e1cb7fe7b46261d63062ca619e706b762be83184147c2983c2400c0feec117117cfb779de6cc2de8a9018c59f65855a40af26a84d0c679bf6983c3bf4c9da1d8c78f7719031821d164851428713635a880aaab38f11f0f3665a333897b2a85fd0ab85c65659155dc1383d6be5c7c1571bedb60c288ab6e03dfec7b946b4bfb1a08e41b43b42d4409c3cb9e781a3623f2ffa61af59d85f8ed3a9b6482ee3b95e5a9ab17f38cd1afe6162600f8cfbcef063a8344cdeb322f02ad63c49a7237b427629d96817357edf5074ce516b98b1963a3844d8a0196f4a7a49b9dc1e4a554302fe3ce68816c845ccca6eeae853caadf26c785b3a865d00c7636e7add89f1a4e9365b705d7e2e8e88a1619ee320ae7e82b66ffd5766dd410ebc7fa1da0bb76941af1a209cb9e3ccdc78cf067df1ddcc15f24580994795d61ad626c2ff126811f3bbc1ab8b1b3756f3c6f5ef6d55cb4722851487453cc12b237ff1bc656460f78609cfd9022168f82b876427496d4d9ef27b4539edb9a58971cbfdd4685e8baccebdcd3c043b64d85a7d928a641346637e8723c452b7bf40ccff0cdfc67fe69bd4ff82c996b6fe6012f9c62f2c6441aedc9f02e85d1eb6733e23155d8a745bb6efc969ff3c3b07966fbdb1967270cbde70fd7ac3a1e1cc75a66dd03e61fdd6d9decbc8032fb4edc4d6f07ba3a593c1138d683175ca9eb7af1b264d94243d3a98ba49514221e029f1d1a1c62731fb95f65fe43e44a4470818adb44728b6a0560dc2baf6c6aa6f0371e0291083a6a7bdc382312f2e0c7fc32c6edf0fe28421f8c63e69d0f35583281777284bbfe90debcd80a5c4775b87e5ebb826ff3f8447c6ea64da8390cd6b5a24324f260aa36b1cc3b609221121c4baa51d2b4862135bdf656daaf423a5b098301989919d3aedb9cc5bf4651a496bd75b7196b886533f31d3db76f8b3f6d4d4d6891d4193f229da6fa57fb212da86aa64ba45325de2d5c4115961665841737b78ab7b8ffb244ccc76a4a5d6918af31b44953676f74b32226b6cb1b1b506752169b2605451e1c33c06d33f7a21db8e43c06d8d39aa875ef11cae3ee76a43e49d18117c36da90f22e9e40ef962ff544d054c70eeb6e4bac3d0b1f384d55792226598c7c05b3c067369046069396df19b97dba99062fcdfbeabfc2bf17b745d5c490f6dcc9f7364eceeb33b7c50a7ab383f07be5a32949dab1d504db1621f689156d8c1ac4e36033c649a0d4d7dbf6abac68e0b1f101165bd55d72d029beca0490961dec32c554f127f457b22b8d6a3b87b207404c90b0a2ffac881ca0f03680c2cb22668626dc1f875358f0fe3df0b700f7567ad9a6f7532060797558b433437fd5ec1f6c7ccb2f73b68c9e9b5412e7fced43a950f759b0f89a3371e2dbccefcc76c227c1db0b9296a1f29076036dc5b6ed68be3f1bd1c85f1105560811d8d9ef55ba34bc660ec90dcebcb0274589f958db3c27dac04feca91e68aaefd36afcda401178a55edf168bae099afcee364598cdc75cba67b09741155c0e0ac34bccdd906e363dabc28f0f7827f434e256fd84e0b74471ed3571e7893584f9e6eaa3a45591420dd424ded011b9421fba68ffa1c321d4437a83b7408803979a824bf91d8c92f13597a8d41e588fa2ff363d8e30ff762dcfb6e74db8665e27a680119352fedb52ff359e9c6f7f524c94fb781b6b7bf121a60b6da20aeb2edc80cca84adc32477c857d121416d6699b867979ede89d01348280d7aa94e06180c24104aa171676d4478ae5137c548f998c2b46a44a3d0d7aae151b3c657118eb446dd8429c3f0ba9513244ab380591b868e397823eaa9aec929f3bd2da6630220969b805710456cc22fe0c1c634dc33e3b79c6864170778770f0910182f860bb4f026458ae4a2d1bae9c2bed9e1554d730e5528e8d4b1ea8e1c40ab4abbdb70f5f77c7f315965ced1f02e0630f2879cbb3ee2abaf86b647db1588162eaf04a069899dd8e582e3f278703e2ba48878f972d799b0576d825982102939393e117a65a440b021e26dc40250505b638eb1d233220349583cee37e7c490f5071745b686d8b848d89f795b605073e34ebaac006b7767755b3bde4387e9bd8e77189a7935a517e0a84068933f9d672ff9eec938c0e2d7c8c5d1f56c265f72ce4bf04712f8ac2ab096f6da493a18a35a290bd6116283424d83af2b9e5504985650cb17aea6d9c2717572aca07695dcfae896705cb761c51b4f2b5ada7c47bae04b696bfa619086893fc039838637c8227a37588d6bebdc81a4517096d377f648afea46b5de808bf41e4", 0x1000}], 0xa, &(0x7f0000004580)=ANY=[@ANYBLOB="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"/260], 0x100}}], 0x1, 0x40040) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[]) 23:35:00 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x6, &(0x7f00000001c0)=[{&(0x7f0000000440)="cdd3138cd8d4a4fe47d2b25d5c92daeb317e8f158f03dc75bde73a87f2d362962950171033addb48befdf8429edbdc5ac237d9c1088f89e6987f3461a92bc315117e433367bdfe7b9722dcf4459e142941a556c479d614f64eb890257020478a308505ca05c04dd5d61edb88ce565ddda0ed95392c5273436e6b39d30b7efc79dd5b5fd82df2fc8559b88ade307ca6f9c8c0c00f96dbe32c7d4325967dbb1c7a14aa8aaa9b06e553bbb93351f8264d1492225e19eb08a31b4665defb46143e562833b1d7180bc73a8ee66c", 0xcb, 0x4}, {&(0x7f0000000540)="6a0b251c2b1aeebc6daf8cc67dc3a02df1229b5f6013d43f5e8461be2dc8e0173a430bb5f4a7d0d7068a7d2ecd6ee8d5d74ed7ca709803cd5f4233a117089d1d72972bef622721021e851b7ccee67bd8ac0d64bcdd690e560b8464b7147d17c67c85a7257581dddff43eaf4f1f08ed6b71a3deb2c589d7a319aaa8bc60431f70c3a2e5edc0ec92d8dbd3a7a229c4f9da1a43e74716126e9adc06cb06e22946cd129ea674b0e8f2ab44e281d7593d1688696f485022f0d3b920b06d00bcbde8e273eee68b9aecfe254887dbb80d7b58554b401b16ca34faae9191069d29ce84", 0xdf, 0x8}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000640)="50e522302830d2c6ce517d645ac985184d952d8e92b3336c62c65e58449cbaa5aa559551840da931905ae2af3e8409944c378a7e98eddb5df2a7ccb18779f9df22121f1cc40e6614041bf65dc6de625897cb6e9e67964844b2c7fab6c810f845c476dc2f1b46bd90d9863ea3051bf0463c57b5f4252486aa01bee10ea8859af58ed606f1a62cd96c961e97c16ddc97998eb225039440406307ce698f369f15167ccc935ac07123d0c0c77b9a2e884ec356a604bd91ff8637fad40f38937e6e50c1d6d2fb27cd766ab9b72d6f74f439b948088cd80235eb6f6fd688fdb03e086024ed874b55e00303fa3344f7490ec2e18f71a858e9a7ec48", 0xf8, 0x1f}, {&(0x7f0000002e00)="1d5ba8b481f429ff44807ae96f2d40093b1f153273b601d28e886283caec7412779d568ae0ec97930ece4ab0117942473576f3cd87e56bebb147e6c834a711c429ca4f8cd05f435630669034a5ff64e65991db09543d9161ae6eaab76d1fc3de365f4bd0c735e8647fe2d594a4a48c6011d703625b2e432f948322733d88f193b391d0e485b86866fbfd36d907f89c4f73308a35a0c06bf88528005b1d4140227ed7a929a4a6311ab7ad76cb0df4fc91fa6a92421b4f145c7f108d0ffc78bf5a143b259bb98753773d19320775c7dc0236a0e3bc194ca24369735a682f169e277cfd2209c19571b66660ba52a90d531e67d60981db020c592be046443437b8e58e597892ad50b818ba17f30451ee4830d29820c64078a00f1dbfc2cb33476aa3712c177f4d283e03860d92527b2031f469fbbe90f2c232263a141cb3701b39b5afb490721ac907a2a142f510961b48cb6f2ed9a52b48b9c4a4f45c5c2a9e504a098aba0cdb1a0be3de13c9743d866d590cc5f2ff033398afc3d726724e4a4ee1f6625c100b8dbe9d1243c2a67dd1d5281e3129bdc0e3aa1033ac85afd3e71aaf6e8ff5989bb5c587eee2efdebd75d90c901d3e4071e958f8156e7686c353b8736e2a85d800ab289a9a2215a90043b5160f09614a21638812584cc1b8a26b56b20927470f9685e3c0da2be137ffc8a4514d7f916349249d4020f5965967c08a1fb1c1977aa5acc3d3d5c60fce92f88e5ee94cea7819e54b8c27f2ab7173a1b01f02cdbfee3caa32583c8d34b704ed90732f4a2e4c6bbc98158c83bdd15bdb451e7cb4509f93f6bd666b325d2b7651aaaa5e089d385e62162c2d4fbb919fa1f9662618e35b995448fd451edecb8a6aa78c6a1fbd2dc2dded9a6b40969461b298e4f6634fd3eb9bc7a77d0e8737eb91918358ea30e3f677786fe4f80bf64e8e96fef36dbdf91d0339db76c4e12aaf38ce74414a9949d52d1673f5999a5cfe81540f6bdbee05765a4dd8daeb021b2a50b4c94b718ce10643dabc1ebc965332f1d668a7dfede6028ac9840f8f26c9b03fbac9e3935de7cf027e68e9db86fe7840eb2328f6a935097a3f54ee96c1a44d645285894404b3c9b90843e363d60b475252a29a0ee8a4ff6d5d88a65af9203850a4e6bfe58ad93bdfee9bcc97f663cda3150c705253f0e2dc72ff7546d667deaef9adf585352ca2a050e947b17692622e363804d79b4b89177bd04420540d80e8d1cbff47df24d43a6466bd07ea1213f40e19b8819e0a5601e173a7fd9311b592a701e0b5f342961ec101bb99c2f75224474137e85c4aadfd1919b2da09a1129759062dcc12e942d6c8ddd0d3200cc9ff82d7fffb567564e110f586bf0ed8e26bda61d45edbf2390e0a11af015d50657931ab2ba782986ec5e0ecffe0631325071af59ad09dadcaad9bfd31943ff9b1cbee2859d92cf99c95896d4bd9b94474514c7b4167371a1f627254c2641d85f805d7c0af0f1d055ef254a365f90cd64ffd6962abfb590907887fb5d568139c8b8f02ad0e06f4215f1ea0c9c6adcef52b72f4628b01b59c147f1d92f40ca03d2868ceab6e8d00dbd9667425af5680098af08d1f84ef50b430d4a4a3c2ef92c8ae3107d499bf361ccf0693a1f3f1bfefffa3683d63e7ce09c7ef176df765ceefedfbb123b63154873853842d3319c43849fdcfa54ad521bbadc32a47696d6ca9430bfd801f1128ac3e8ad40dfcae9faa77718becf6bc291952527c7c361d546f8b7b50d0c42431c78d00b6871f373848e1f7fd8a955b8b790fe635c5e50ad6b1a2bc050d6258cabbb1038911c113bfee317f402f73f2230126b3087e07e636b7c5c861b8572f6dad756c3a4d3fc47f48d5accf22323cf0244839af7260fc4d3fc82565114199e25c94d10c8e45fb32c3db4658e6416ceec423dd8789a44dac463616961d593437be1754d30b29b5b1eda17aed57f07340ca94e1a958898662c85cdd93272e6c9450218d5d4bfebc10cb185318c6b9239871fbbda25f38e9548c9215b0d88fb7d7b1e639ee8cb4cdcdad9ee7a8a6a9ec5df727883cccdeaaac27667f36d47de520aad228936e68be7bed9115d7fcc7fe35fce6a2f09215e6c1b29f858a446e95c7801a33c62379ca2f0901327d3086b866c7e54f027221e12f8b6d28393573f1a638762900e7a0eface948fbc232da74420c9279e059e5e21f89eeb4573f2ac96787e336a88f3e15bf19239f2a36163221a6bc7f7dea4e9c14e5c10758fbcab4d55ee92926af52c40f7346e31b00e1df47ac092fce3e2384f4e48fc96fb1bf6d658a59ac4bd3635e9120988292d784904f56218aa89570463aa9f3793b9d670d789ebce8850f51965db1c5c53f3f2287769bd8a04333b311589c5a1b0027cdad45f78f9b87680d06df80fe87773bda4554ec3003cce299540bf5156c921733a9c7375d9baeeb225fb43718f49fbbc3cd99517f77cc565efa862a1e98e971bbfd1b04027a43e484d4d5c15607c3ee2c3d9e8e6f32a1bd8948ba1c05b2563361db409f1a6a7c368ce61a78893cce840a94ac53fba17069550c98f0f5467be244022180966787dc08848d97fa7aa04efb54e3bad95fb3dfad92844a947370ee5a47f9afa772069d2187e5f6ddbf91ed56552de4441fef0bba2875b12f4bf07d59ac9af9af92419051e2732663cff8e2a4e26f8b3d622b52b9991656e9f93be907f13dc4c35bd7e85af08f1056c29c6dd95731c1d86b5ae50b9fd525d72bd681d804e30b6de52f892ee6d533e2b3014193bb7268d517252bb6b94c169795a5d17012036b40040ff6984b42ad7003c4828a73735b1907f3377284271114ab1bcd28571dbbdeddc2ca126fc69e7d365fa295536f17c2a4d97bced96168d606e052a603ee84c85dbf568b56f65804ad59001fbfd2672756365be1380d81f8bf104b692a3f7f7c8f10d827d0f92a05cc4343e179fe082287f99cc3c9372c1d85be0fe3c2d4fdeda0832da9dc9c867d11a4f6a7c10fdffeaae4287e5113521f17f404dffd8da40d45068ffb6612beadf27ecbf29bb82c7290ec2772716c61dabb0f23ac0c6a52c2e6f1696878b239f6132f511b2898f944414526856fd55118afbd6622aeb61bebfe1aacaa1a121b08f22bb86020b1ed3b3c23530d23ca64fd5264c1aff846cb1420ea888a47dae599296c2961c06824f5e99a7f3dd3f43526aba02c90031230449e1645cdcf35ecd654eb3d549ef3f55c221076dc6b0b20ba7e5d2d50da4bffb24a0de682ad5960ef4d42ba97faf01e88944058ab974c0bc596c48da9e7f63003d64259ba956f2675977ad418037bbff649e56fd3aefa18c2ef3dfe41fc7e0182656b7e71988a8e34e074eb4c815143308f5d0c7563f9a139d34505d1e76029497ae0700e98c99c8fed9bfe998c5088467eae5c9b9457070528d4c2cd131b4f93fa6df4abff0866dc7b090a788fc644b175c59ffcedc346ad6702899915d8406b4ade67ad6a65b310a99c14bb5093fb3ada0ad4d51fcc4267f96f8465fb19617f7dcc753581492e34f53409a31e83842d3f73a322a09ec4ded412731b9f842c80cdd2f46fcce34bf8c3197983c1c5ea9b9e8422e5a2f50d18add5c44238aa61db8bab3f5cb19eeed4bbbff0e9c2422016d875c4a0cec4f1f5941fb3cc9b663123978bd8a3ed44bd0e8a194f011d430f37f70db5dee1a684d29065a22c36be5a9cb914f8de9a4d784e2292d252b01341a65be13957d200609415331aee3b0519a1efe6e9636bbcfd4e93d365c5a44f888080d5c1a91c1ac25c9f390529d90ccd185656d62d95be5dd3486cb63ccc1b3dd68d9630bde32c25ec9b8aeccd4c8db4e434a26f7c98734058515ea94ba8f4d6ea50735db9c1bd85ca04ae7c1149f4a1404169053be7de7934e5c462201d288cf16ca43fe6a2e323e94319e0150e70466b1fa9db1cd4da94d80d262e9cb498c96dc6f35763451dfbfab5293c283adcb0e9b64b2e3df8bdfeff436636e4f325e59dffdeb96327159b40397c6fe92f8e56400061000b7bb45d1a61be807335c05c1abd17c8ac98236b68aeb6aa53144d87ae4e3ddb8413ce7dd8bdcdba41202b1a7dac2ff063eaba07f6ac4fe2ac9eafc68bb44263e7b132f0aed7d0cb15df5a8daee1479180b077829413207d4cbbd4535ec3da905718428f5ad6745208a5980216fdc52a8528ad814c1147adb2bacd9ea3410b08c9487161056086d76d1f90bd43424118d27539ad149d573091abd23e51cbc181f6835e4c736603480862d23a1fef9d059a93eee4a209a892753b6cbc865f60503fee08bf9ef24e9170dc5222bb31bea5c9df1a87fbda97bf4374f404134b2ea1c2c9f92ea597cae58cbb35168af38b214e093a24f76fc8cb31fd54a5636a74143aad554a917542208d6db4bb96b4a483a0a93f92312dd5da1ff8614029ecb187948fe41b2e82283a6b18fee9263270237d7a20e62bad8110f2eb8107a628ec8ca102d88fc3b69d39a5efbec59f0078e332aba22785cd8a9c667c107d2539baeb7fc56d860cae63229a8fcb0c4b6c78b872fe9d141fbf78a188c70034bb2af5a3c4d2a0fca3dee49a5dc6fb73f9847b62dac9a80676387b7512733831ac2a2ca5848f738740e7021dd4e03353bf278c6a9e1045baecac6b2d21142fea9176c5cb9b58f0c22c0ebfe55f917843491d8f1e336c14f55a29df1bdefd9037575ea03a3d3c2073d95a84e268384adf5587a9e7627f4ec4335413db2e805c7557f4f9c7082d836f0abcd1e9e95a8a461107aa5bb61ed13f8dab56582ffdb31fdb4090c1577a3e189f575c718eb8c1cf071d4415ccb28bded158be507448c8e89f7261ae1b3b78202a91e4650418d11e0785e24fb4b79d19c8402587683346ffc50000835ee609bc89444dfdd227d82a3a3c016684a230d635c358b636e717795b8847fdcc407b75d1ed79bac1b4e27de1eb1a598d7fda96a9f3c191380c8d87273ce863140dba57dd460390546d01e613f4bbac55fb11089b61654ed9a934921699b7e483e09f9f9061fe73d3b91745e756a04bf349d93dd474bb72a02c2f1c8555255866a5cd1a55e0014c3a6ebbd479987673b076ea3410318a168d3a769caa16089f6ac1ccc12a379c1c3e00bb7c64f5fa935bf7112578b34f4724561610a57257e94abfdd7032db3cc63481206f509ae559a072023af236179fe682bcd51b35be06dec6e031769b3e4a0ca95e53db2b93afb755606f8ff35d166358be34897c991dfc09012f8f0a61b2f41cefdcb36a83a12d9e783bea5e1e6df634680217ecc396f668be5f585dfec4cf35d03eacccabc477ec27a62353fd6ca642bb88a6cd78bc5b660e9d4c472c6780f7d22c88a0201a0fb634402467e36a0c64ea2620cee03a72c2821eb7fe83ffdea4b57ffe8f5129e220f5be5f0902863bd3eed36fddfa651e94467c1cb90e18399ca029a000b8ff220eab4453d05613c073a067fea53dfb0224fe2a1c124e5ef6c18e35c33780a7afb07bb96e9564be316dea4df22ac095eb4bba3e343898aed89d995f2d35908b555eb4389911f61bc4c5b977cdf0d52396c0e5dc9477187fd73162115cc41c21862d8a14868a776ccb691fb648d5f39cdd3bc46a2c60dc4670ed9fcf3c33d7503bcd498edae56290b0a73bcb1c442bdb1c6bb6189246d0ac25b7036f1f5b01904882478fb817ae730c981d70b00d7ac600ef0d523807b801847761c30d881d2c74f980d6de71ce949bc6f6982c89237f011873be847265b692e58f2563213464dda398b7e20fb5ba", 0x1000, 0x2f}, {&(0x7f0000003e00)="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", 0x1000, 0x2000000000000}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x4001, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) [ 2684.442901] FAULT_INJECTION: forcing a failure. [ 2684.442901] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.445158] CPU: 0 PID: 14975 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2684.446275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.447622] Call Trace: [ 2684.448057] dump_stack+0x107/0x167 [ 2684.448658] should_fail.cold+0x5/0xa [ 2684.449280] ? proc_self_get_link+0x18b/0x200 [ 2684.450011] should_failslab+0x5/0x20 [ 2684.450631] kmem_cache_alloc_trace+0x55/0x320 [ 2684.451390] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2684.452114] proc_self_get_link+0x18b/0x200 [ 2684.452815] step_into+0x1595/0x1ce0 [ 2684.453430] ? lookup_fast+0x6e0/0x6e0 [ 2684.454079] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2684.454834] walk_component+0x171/0x6a0 [ 2684.455480] ? trace_hardirqs_on+0x5b/0x180 [ 2684.456177] ? handle_dots.part.0+0x15c0/0x15c0 [ 2684.456940] ? security_inode_permission+0xcb/0x100 [ 2684.457756] link_path_walk.part.0+0x699/0xbf0 [ 2684.458506] ? walk_component+0x6a0/0x6a0 [ 2684.459186] ? perf_trace_lock+0xac/0x490 [ 2684.459874] path_lookupat+0xb7/0x860 [ 2684.460503] filename_lookup+0x1b1/0x570 [ 2684.461161] ? may_linkat+0x230/0x230 [ 2684.461802] ? trace_hardirqs_on+0x5b/0x180 [ 2684.462515] ? memcpy+0x39/0x60 [ 2684.463061] ? getname_kernel+0x21e/0x370 [ 2684.463746] create_local_trace_uprobe+0x86/0x4e0 [ 2684.464524] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2684.465266] ? memdup_user+0x7c/0xd0 [ 2684.465881] perf_uprobe_init+0x136/0x210 [ 2684.466559] perf_uprobe_event_init+0xff/0x1d0 [ 2684.467311] perf_try_init_event+0x130/0x570 [ 2684.468031] perf_event_alloc.part.0+0xd96/0x2b70 [ 2684.468825] __do_sys_perf_event_open+0x579/0x2e60 [ 2684.469641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2684.470422] ? perf_event_set_output+0x5b0/0x5b0 [ 2684.471194] ? wait_for_completion_io+0x270/0x270 [ 2684.472005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2684.472846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2684.473688] do_syscall_64+0x33/0x40 [ 2684.474291] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.475128] RIP: 0033:0x7f5ced6c7b19 [ 2684.475733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.478684] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2684.479924] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2684.481074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2684.482223] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.483375] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2684.484519] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2684.520440] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2684.540173] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2684.569708] FAT-fs (loop6): Unrecognized mount option "smackfshat=" or missing value [ 2684.634040] FAT-fs (loop6): Unrecognized mount option "smackfshat=" or missing value 23:35:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) 23:35:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x5, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:14 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:35:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) 23:35:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1a00) 23:35:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2698.562792] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2698.576373] FAULT_INJECTION: forcing a failure. [ 2698.576373] name failslab, interval 1, probability 0, space 0, times 0 [ 2698.578171] CPU: 0 PID: 15010 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2698.579027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2698.580007] Call Trace: [ 2698.580343] dump_stack+0x107/0x167 [ 2698.580782] should_fail.cold+0x5/0xa [ 2698.581238] ? find_held_lock+0x2c/0x110 [ 2698.581731] ? create_object.isra.0+0x3a/0xa20 [ 2698.582287] should_failslab+0x5/0x20 [ 2698.582771] kmem_cache_alloc+0x5b/0x310 [ 2698.583287] ? __task_pid_nr_ns+0x16a/0x4f0 [ 2698.583849] create_object.isra.0+0x3a/0xa20 [ 2698.584382] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2698.585049] kmem_cache_alloc_trace+0x151/0x320 [ 2698.585616] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2698.586191] proc_self_get_link+0x18b/0x200 [ 2698.586712] step_into+0x1595/0x1ce0 [ 2698.587216] ? lookup_fast+0x6e0/0x6e0 [ 2698.587690] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2698.588275] walk_component+0x171/0x6a0 [ 2698.588789] ? trace_hardirqs_on+0x5b/0x180 [ 2698.589329] ? handle_dots.part.0+0x15c0/0x15c0 [ 2698.589896] ? security_inode_permission+0xcb/0x100 [ 2698.590504] link_path_walk.part.0+0x699/0xbf0 [ 2698.591068] ? walk_component+0x6a0/0x6a0 [ 2698.591558] ? perf_trace_lock+0xac/0x490 [ 2698.592062] path_lookupat+0xb7/0x860 [ 2698.592527] filename_lookup+0x1b1/0x570 [ 2698.593010] ? may_linkat+0x230/0x230 [ 2698.593495] ? trace_hardirqs_on+0x5b/0x180 [ 2698.594017] ? memcpy+0x39/0x60 [ 2698.594411] ? getname_kernel+0x21e/0x370 [ 2698.594925] create_local_trace_uprobe+0x86/0x4e0 [ 2698.595514] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2698.596059] ? memdup_user+0x7c/0xd0 [ 2698.596515] perf_uprobe_init+0x136/0x210 [ 2698.597022] perf_uprobe_event_init+0xff/0x1d0 [ 2698.597565] perf_try_init_event+0x130/0x570 [ 2698.598093] perf_event_alloc.part.0+0xd96/0x2b70 [ 2698.598683] __do_sys_perf_event_open+0x579/0x2e60 [ 2698.599286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2698.599859] ? perf_event_set_output+0x5b0/0x5b0 [ 2698.600440] ? wait_for_completion_io+0x270/0x270 [ 2698.601090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2698.601749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2698.602690] do_syscall_64+0x33/0x40 [ 2698.602721] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2698.602735] RIP: 0033:0x7f5ced6c7b19 [ 2698.602754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2698.602765] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2698.602788] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2698.602800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2698.602812] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2698.602823] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 23:35:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2698.602836] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2698.632894] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:15 executing program 0: r0 = perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x6487, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) pipe2(&(0x7f0000001040)={0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) r3 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000001240)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) connect$unix(r4, &(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{}, {r5, 0x82}, {0xffffffffffffffff, 0x8109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x90}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) perf_event_open(&(0x7f0000001180)={0x2, 0x80, 0x1, 0x1, 0x3, 0x40, 0x0, 0x38, 0x22060, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x70cc4c6b}, 0x201, 0x100, 0x1, 0x8, 0x7ff, 0x7, 0x4, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000188c881f", @ANYRES32=r0, @ANYBLOB="200000000000f62e2f66696c65310000"]) 23:35:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = eventfd(0x1) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:35:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) 23:35:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1b00) 23:35:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, 0xffffffffffffffff]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x6, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2698.801997] FAULT_INJECTION: forcing a failure. [ 2698.801997] name failslab, interval 1, probability 0, space 0, times 0 [ 2698.803156] CPU: 1 PID: 15029 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2698.803741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2698.804434] Call Trace: [ 2698.804664] dump_stack+0x107/0x167 [ 2698.804973] should_fail.cold+0x5/0xa [ 2698.805293] ? find_held_lock+0x2c/0x110 [ 2698.805629] ? create_object.isra.0+0x3a/0xa20 [ 2698.806013] should_failslab+0x5/0x20 [ 2698.806334] kmem_cache_alloc+0x5b/0x310 [ 2698.806677] ? __task_pid_nr_ns+0x16a/0x4f0 [ 2698.807048] create_object.isra.0+0x3a/0xa20 [ 2698.807420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2698.807845] kmem_cache_alloc_trace+0x151/0x320 [ 2698.808240] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2698.808630] proc_self_get_link+0x18b/0x200 [ 2698.809003] step_into+0x1595/0x1ce0 [ 2698.809314] ? lookup_fast+0x6e0/0x6e0 [ 2698.809654] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2698.810030] walk_component+0x171/0x6a0 [ 2698.810364] ? trace_hardirqs_on+0x5b/0x180 [ 2698.810728] ? handle_dots.part.0+0x15c0/0x15c0 [ 2698.811141] ? security_inode_permission+0xcb/0x100 [ 2698.811583] link_path_walk.part.0+0x699/0xbf0 [ 2698.811971] ? walk_component+0x6a0/0x6a0 [ 2698.812327] ? perf_trace_lock+0xac/0x490 [ 2698.812682] path_lookupat+0xb7/0x860 [ 2698.813014] filename_lookup+0x1b1/0x570 [ 2698.813363] ? may_linkat+0x230/0x230 [ 2698.813705] ? trace_hardirqs_on+0x5b/0x180 [ 2698.814070] ? memcpy+0x39/0x60 [ 2698.814346] ? getname_kernel+0x21e/0x370 [ 2698.814717] create_local_trace_uprobe+0x86/0x4e0 [ 2698.815125] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2698.815514] ? memdup_user+0x7c/0xd0 [ 2698.815826] perf_uprobe_init+0x136/0x210 [ 2698.816169] perf_uprobe_event_init+0xff/0x1d0 [ 2698.816546] perf_try_init_event+0x130/0x570 [ 2698.816920] perf_event_alloc.part.0+0xd96/0x2b70 [ 2698.817333] __do_sys_perf_event_open+0x579/0x2e60 [ 2698.817751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2698.818156] ? perf_event_set_output+0x5b0/0x5b0 [ 2698.818541] ? wait_for_completion_io+0x270/0x270 [ 2698.818952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2698.819396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2698.819820] do_syscall_64+0x33/0x40 [ 2698.820142] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2698.820565] RIP: 0033:0x7f5ced6c7b19 [ 2698.820876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2698.822399] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2698.823060] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2698.823664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2698.824275] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2698.824868] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2698.825457] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2698.829573] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x7, 0x25}) tee(r1, r2, 0x5e, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x80, 0x8, 0x4, 0xffff}, {0x9df1, 0x9, 0x0, 0x3}, {0xff, 0x6, 0x0, 0x5}, {0x7e19, 0x80, 0x2, 0x1cb}, {0x9, 0x9, 0x4, 0xab2}, {0xd01, 0x9, 0xd8, 0xe1}]}, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:35:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, 0xffffffffffffffff]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000) r5 = inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x17) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000040) inotify_rm_watch(r3, r5) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000140), 0x2a, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x110, r6, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010015033b98e2ff0f00000028bbd826b5aa6cda4d9aa55859844777db1016b2510e00a31d0ea74c155241e063946e57cb4628bbc3f9", @ANYRES32, @ANYBLOB='\x00']) dup3(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r2}}, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:35:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1c00) 23:35:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x7, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2698.927127] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030d00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2698.999037] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) 23:35:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2310, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x1d, 0x0}}, {{&(0x7f0000000140)=@generic, 0x0, 0x0}, 0x1}], 0x300, 0x10062, 0x0) 23:35:28 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, 0xffffffffffffffff]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa95, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:28 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x2, 0x97, 0x0, @rand_addr=' \x01\x00', @empty, 0x80, 0x20, 0x5, 0xb7be}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) 23:35:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x8, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1d00) [ 2712.210405] FAULT_INJECTION: forcing a failure. [ 2712.210405] name failslab, interval 1, probability 0, space 0, times 0 [ 2712.211713] CPU: 1 PID: 15180 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2712.212405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2712.213228] Call Trace: [ 2712.213506] dump_stack+0x107/0x167 [ 2712.213885] should_fail.cold+0x5/0xa [ 2712.214285] ? create_object.isra.0+0x3a/0xa20 [ 2712.214761] should_failslab+0x5/0x20 [ 2712.215166] kmem_cache_alloc+0x5b/0x310 [ 2712.215599] create_object.isra.0+0x3a/0xa20 [ 2712.216056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2712.216583] __kmalloc+0x16e/0x390 [ 2712.216955] ? memcpy+0x39/0x60 [ 2712.217304] alloc_trace_uprobe+0x3d/0x2b0 [ 2712.217733] create_local_trace_uprobe+0x101/0x4e0 [ 2712.218237] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2712.218708] ? memdup_user+0x7c/0xd0 [ 2712.219100] perf_uprobe_init+0x136/0x210 [ 2712.219540] perf_uprobe_event_init+0xff/0x1d0 [ 2712.220005] perf_try_init_event+0x130/0x570 [ 2712.220457] perf_event_alloc.part.0+0xd96/0x2b70 [ 2712.220961] __do_sys_perf_event_open+0x579/0x2e60 [ 2712.221471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2712.221969] ? perf_event_set_output+0x5b0/0x5b0 [ 2712.222448] ? wait_for_completion_io+0x270/0x270 [ 2712.222966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2712.223506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.224037] do_syscall_64+0x33/0x40 [ 2712.224421] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2712.224925] RIP: 0033:0x7f5ced6c7b19 [ 2712.225303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.227116] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2712.227892] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2712.228701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2712.229394] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2712.230084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2712.230788] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2712.242193] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2712.290416] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1e00) 23:35:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2310, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x1d, 0x0}}, {{&(0x7f0000000140)=@generic, 0x0, 0x0}, 0x1}], 0x300, 0x10062, 0x0) 23:35:43 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x7}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x11, r2, 0x1, 0x4, 0x6, @local}, 0x14) 23:35:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14004000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x9, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:43 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) [ 2727.388107] FAULT_INJECTION: forcing a failure. [ 2727.388107] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.389311] CPU: 1 PID: 15207 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2727.390184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.391347] Call Trace: [ 2727.391628] dump_stack+0x107/0x167 [ 2727.392012] should_fail.cold+0x5/0xa [ 2727.392421] ? trace_probe_init+0x6a/0x4e0 [ 2727.392872] should_failslab+0x5/0x20 [ 2727.393272] __kmalloc+0x72/0x390 [ 2727.393737] ? trace_hardirqs_on+0x5b/0x180 [ 2727.394200] trace_probe_init+0x6a/0x4e0 [ 2727.394750] alloc_trace_uprobe+0x63/0x2b0 [ 2727.395290] create_local_trace_uprobe+0x101/0x4e0 [ 2727.395813] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2727.396302] ? memdup_user+0x7c/0xd0 [ 2727.396707] perf_uprobe_init+0x136/0x210 [ 2727.397126] perf_uprobe_event_init+0xff/0x1d0 [ 2727.397619] perf_try_init_event+0x130/0x570 [ 2727.398060] perf_event_alloc.part.0+0xd96/0x2b70 [ 2727.398576] __do_sys_perf_event_open+0x579/0x2e60 [ 2727.399071] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2727.399586] ? perf_event_set_output+0x5b0/0x5b0 [ 2727.400045] ? wait_for_completion_io+0x270/0x270 [ 2727.400573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2727.401244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.401855] do_syscall_64+0x33/0x40 [ 2727.402319] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.402929] RIP: 0033:0x7f5ced6c7b19 [ 2727.403301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.405214] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2727.406097] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2727.407050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2727.407799] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.408537] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2727.409275] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2727.410118] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 2727.412492] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:43 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) 23:35:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xa, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1f00) 23:35:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x20) lseek(0xffffffffffffffff, 0x800, 0x4) openat(r1, &(0x7f0000000140)='./file1\x00', 0x40402, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) [ 2727.601533] FAULT_INJECTION: forcing a failure. [ 2727.601533] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.603486] CPU: 0 PID: 15224 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2727.604609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.606038] Call Trace: [ 2727.606477] dump_stack+0x107/0x167 [ 2727.607076] should_fail.cold+0x5/0xa [ 2727.607724] ? create_object.isra.0+0x3a/0xa20 [ 2727.608474] should_failslab+0x5/0x20 [ 2727.609090] kmem_cache_alloc+0x5b/0x310 [ 2727.609755] ? __kmalloc+0x16e/0x390 [ 2727.610369] create_object.isra.0+0x3a/0xa20 [ 2727.611082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2727.611929] __kmalloc+0x16e/0x390 [ 2727.612509] ? trace_hardirqs_on+0x5b/0x180 [ 2727.613221] trace_probe_init+0x6a/0x4e0 [ 2727.613893] alloc_trace_uprobe+0x63/0x2b0 [ 2727.614588] create_local_trace_uprobe+0x101/0x4e0 [ 2727.615404] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2727.616167] ? memdup_user+0x7c/0xd0 [ 2727.616783] perf_uprobe_init+0x136/0x210 [ 2727.617465] perf_uprobe_event_init+0xff/0x1d0 [ 2727.618211] perf_try_init_event+0x130/0x570 [ 2727.618935] perf_event_alloc.part.0+0xd96/0x2b70 [ 2727.619749] __do_sys_perf_event_open+0x579/0x2e60 [ 2727.620556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2727.621340] ? perf_event_set_output+0x5b0/0x5b0 [ 2727.622109] ? wait_for_completion_io+0x270/0x270 [ 2727.622923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2727.623785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.624633] do_syscall_64+0x33/0x40 [ 2727.625243] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.626096] RIP: 0033:0x7f5ced6c7b19 [ 2727.626704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.629686] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2727.630950] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2727.632124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2727.633282] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.634440] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2727.635608] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:35:44 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r1 = accept$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14) r2 = syz_io_uring_setup(0xdc1, &(0x7f0000000100)={0x0, 0x7a22, 0x2, 0x1, 0x23b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x7a4, &(0x7f0000000740)={0x0, 0x9476, 0x10, 0x7fffffff, 0x11d, 0x0, r0}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r2, 0x10000000) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) syz_io_uring_submit(r3, r6, &(0x7f0000000900)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000008c0)={r7, r8+60000000}, 0x1, 0x0, 0x1}, 0xc8) syz_io_uring_submit(r3, r5, &(0x7f0000000840)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x365ce}, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x2010, r2, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x9, 0x1000, &(0x7f0000000680)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="ce3022e2f95055e003dbb825aa22296faaf63314bbd8eedb022a0ff522dd85b62a122439b577bc0c40fef64aed076f3d9309b429017cb015d7878035caec8faa", 0x40}, {&(0x7f0000000280)="576131b2f1cea6006bc7778a4e73d619ae30c0af4acd6e65b64b29d95fb94fd342c99964559910b7c89fda135fc54dedd7a59efa6d51c3dbf369108f713bb417cfa1c0b9f116c9484995b7502fe99ece6b782c579ccf75", 0x57}, {&(0x7f0000000300)="0bb3d9a76180313a39be220f3bcf235e5eb6567fbb53954ec0841eb19577df4ac1e975652f3743b33c7b287867a039886598fe73b2c8351065461586c380dd6a17b8ac3c45e4d4616d9c7444d197d13ecd1a091462eb88fa83bbf2d9143251b5f50331163ce5f4298b38d1a9381b98716d8540c2afafe008a337a91da27374d9d9d8c3c079fe1959362dc4037dec6b49e848149c7ec366f4fef62ff9aa7b4e878f9874382cb3251409c85ddac3cdf3e7cd401c9b951750627543cb6a228265c52daa9271a1395499b7b7b01f11d47cb1dca99fa74587524bcdd2e8b5c8371c385b0e5728284d4d6ce8549591aae40a9ad676371ec19f69", 0xf7}, {&(0x7f0000000400)="366d82d4fade1f4111e3402a37c361e0c36491b06c39ee3396383f1eb250b91665da3def0b1c18c8c6", 0x29}, {&(0x7f0000000440)="2d25bdf3422965100b35e87ca1cbb3570bd2afa0b721bdcdc5753e398d26db5d89f3e3d41ead48c341bb64210cabbf0fd2b7c0ee74323f07f9ca91f7523f2c73207094ca6a07cef81a7e6b67710528fd0e7fcd7a5860c49296509ef8688cfcff284e10c9c5eb53ec333dc9235fb6fece6abfc3e15d4a0e33c91d895a5821fee1b39b163df8e2a90c330f1b50ab2d2cfd8579f0ba63ede2b69a4b790d0e4cbe7810a1b75647a722482c87ee9d5489a4b6f52c87", 0xb3}, {&(0x7f0000000500)="2e07f75a3792d3b1cc7f3dc908da12e6ac132424a799a160dd514fc91dfe2c1d12e0aef72a80eaeb7619019bf0d9f8dd6eed9c72686db4e8fcef5bf873acae32ca47fc95134dede60b81e74bb40faf7591058fe52f778e13aeb958cb1f2b450505587a1cc459b756e283f9cb8ba1b6806906637cc66d222bf546d5b64a80a49356d8ba4c6f3dc96e2cf04a0b75e3fdaf0162655780e7770e92c2c2e0f4b27cff7fae43dc68e0cda13d6cb04afbf6f2c000fe1bfbe89d6c1b5531108d952650886b31564af6755fa49bd230d75b37262fe2df719638926fbb0c87", 0xda}, {&(0x7f0000000600)="08170d15fac129134d66e813202610b2c1639c087b2808d0b9d0befc9e81b3d96174e91a97210660b15dcd88bd0f2b5a4c9637c69a50dfa34b2f517532733bc037d3bc61fa9bb4bc1cd2ce13036558927ad8efea05c77c", 0x57}], 0x8, 0x1, 0x0, {0x1, r9}}, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x5}, 0x4) r10 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, r11) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) [ 2727.657036] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2727.662826] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) 23:35:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405c000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:35:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xb, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2727.800728] FAULT_INJECTION: forcing a failure. [ 2727.800728] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.801856] CPU: 1 PID: 15241 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2727.802511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.803415] Call Trace: [ 2727.803643] dump_stack+0x107/0x167 [ 2727.803943] should_fail.cold+0x5/0xa [ 2727.804263] should_failslab+0x5/0x20 [ 2727.804580] __kmalloc_track_caller+0x79/0x370 [ 2727.804959] ? trace_probe_init+0x227/0x4e0 [ 2727.805325] kstrdup+0x36/0x70 [ 2727.805598] trace_probe_init+0x227/0x4e0 [ 2727.805939] alloc_trace_uprobe+0x63/0x2b0 [ 2727.806297] create_local_trace_uprobe+0x101/0x4e0 [ 2727.806707] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2727.807090] ? memdup_user+0x7c/0xd0 [ 2727.807425] perf_uprobe_init+0x136/0x210 [ 2727.807771] perf_uprobe_event_init+0xff/0x1d0 [ 2727.808168] perf_try_init_event+0x130/0x570 [ 2727.808641] perf_event_alloc.part.0+0xd96/0x2b70 [ 2727.809048] __do_sys_perf_event_open+0x579/0x2e60 [ 2727.809674] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2727.810180] ? perf_event_set_output+0x5b0/0x5b0 [ 2727.810572] ? wait_for_completion_io+0x270/0x270 [ 2727.810994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2727.811446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.811878] do_syscall_64+0x33/0x40 [ 2727.812187] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.812615] RIP: 0033:0x7f5ced6c7b19 [ 2727.812926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.814424] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2727.815040] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2727.815634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2727.816217] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.816800] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2727.817514] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2727.818244] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 2727.904935] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:35:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:35:59 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0xfffffffd, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x11, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) sendto$packet(r1, &(0x7f00000001c0)="209a59b069bf72b42054884ef2ef32356ef319d63ce8f23eb9ae267268541c6bd9", 0x21, 0x44, &(0x7f0000000200)={0x11, 0x1c, r3, 0x1, 0x2, 0x6, @random="682d31becd5c"}, 0x14) 23:35:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xc, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2000) 23:35:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x4}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}}]}, 0x110) socket$inet_icmp(0x2, 0x2, 0x1) accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 23:35:59 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405d800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:35:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) 23:35:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, 0xffffffffffffffff, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2743.623928] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2743.641019] FAULT_INJECTION: forcing a failure. [ 2743.641019] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.642914] CPU: 1 PID: 15283 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2743.644227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.645487] Call Trace: [ 2743.645894] dump_stack+0x107/0x167 [ 2743.646469] should_fail.cold+0x5/0xa [ 2743.647076] ? create_object.isra.0+0x3a/0xa20 [ 2743.647795] should_failslab+0x5/0x20 [ 2743.648418] kmem_cache_alloc+0x5b/0x310 [ 2743.649097] ? lock_downgrade+0x6d0/0x6d0 [ 2743.649750] create_object.isra.0+0x3a/0xa20 [ 2743.650578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.651474] __kmalloc_track_caller+0x177/0x370 [ 2743.652276] ? trace_probe_init+0x227/0x4e0 [ 2743.652955] kstrdup+0x36/0x70 [ 2743.653614] trace_probe_init+0x227/0x4e0 [ 2743.654274] alloc_trace_uprobe+0x63/0x2b0 [ 2743.654950] create_local_trace_uprobe+0x101/0x4e0 [ 2743.655740] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2743.656652] ? memdup_user+0x7c/0xd0 [ 2743.657271] perf_uprobe_init+0x136/0x210 [ 2743.657988] perf_uprobe_event_init+0xff/0x1d0 [ 2743.658703] perf_try_init_event+0x130/0x570 [ 2743.659602] perf_event_alloc.part.0+0xd96/0x2b70 [ 2743.660417] __do_sys_perf_event_open+0x579/0x2e60 [ 2743.661179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2743.662051] ? perf_event_set_output+0x5b0/0x5b0 [ 2743.662832] ? wait_for_completion_io+0x270/0x270 [ 2743.663687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.664506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.665311] do_syscall_64+0x33/0x40 [ 2743.665899] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.666700] RIP: 0033:0x7f5ced6c7b19 [ 2743.667353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.670191] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 23:36:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2743.671417] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2743.672713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2743.673856] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.674988] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2743.676194] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2743.683338] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:00 executing program 6: pselect6(0x40, &(0x7f0000000000)={0xfb, 0x4578, 0x4000000, 0x0, 0xab85, 0x40, 0x8000, 0x5cd3}, &(0x7f0000000080)={0xffffffff, 0x6, 0x900000000000, 0x9, 0x6, 0x200, 0x7f, 0x200}, &(0x7f00000000c0)={0x5, 0x4, 0x8, 0x5, 0xfffffffffffffffe, 0x7b3, 0xfffffffffffff9fe, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffb9]}, 0x8}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x1c, r2, 0x1, 0x4, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffb, 0x2}, 0x4) 23:36:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xd, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) 23:36:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, 0xffffffffffffffff, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405e600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2100) 23:36:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/34, 0x22) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) r3 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r3], 0x1) getdents64(r0, &(0x7f00000007c0)=""/180, 0xb4) [ 2744.034851] FAULT_INJECTION: forcing a failure. [ 2744.034851] name failslab, interval 1, probability 0, space 0, times 0 [ 2744.036733] CPU: 0 PID: 15411 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2744.037849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2744.039103] Call Trace: [ 2744.039545] dump_stack+0x107/0x167 [ 2744.040142] should_fail.cold+0x5/0xa [ 2744.040767] ? create_object.isra.0+0x3a/0xa20 [ 2744.041511] should_failslab+0x5/0x20 [ 2744.042131] kmem_cache_alloc+0x5b/0x310 [ 2744.042790] ? lock_downgrade+0x6d0/0x6d0 [ 2744.043450] create_object.isra.0+0x3a/0xa20 [ 2744.044173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2744.045002] __kmalloc_track_caller+0x177/0x370 [ 2744.045756] ? trace_probe_init+0x227/0x4e0 [ 2744.046466] kstrdup+0x36/0x70 [ 2744.046995] trace_probe_init+0x227/0x4e0 [ 2744.047702] alloc_trace_uprobe+0x63/0x2b0 [ 2744.048400] create_local_trace_uprobe+0x101/0x4e0 [ 2744.049210] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2744.049960] ? memdup_user+0x7c/0xd0 [ 2744.050576] perf_uprobe_init+0x136/0x210 [ 2744.051259] perf_uprobe_event_init+0xff/0x1d0 [ 2744.051984] perf_try_init_event+0x130/0x570 [ 2744.052676] perf_event_alloc.part.0+0xd96/0x2b70 [ 2744.053443] __do_sys_perf_event_open+0x579/0x2e60 [ 2744.054224] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2744.055014] ? perf_event_set_output+0x5b0/0x5b0 [ 2744.055788] ? wait_for_completion_io+0x270/0x270 [ 2744.056600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2744.057447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2744.058240] do_syscall_64+0x33/0x40 [ 2744.058850] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2744.059683] RIP: 0033:0x7f5ced6c7b19 [ 2744.060293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2744.063220] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2744.064480] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2744.065608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2744.066758] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2744.067893] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2744.068987] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2744.073505] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2744.180955] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1402e700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 23:36:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) 23:36:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, 0xffffffffffffffff, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2103) 23:36:14 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:36:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xe, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2758.543929] FAULT_INJECTION: forcing a failure. [ 2758.543929] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.543972] CPU: 0 PID: 15541 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2758.543985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.543993] Call Trace: [ 2758.544020] dump_stack+0x107/0x167 [ 2758.544045] should_fail.cold+0x5/0xa [ 2758.544079] should_failslab+0x5/0x20 [ 2758.544102] __kmalloc_track_caller+0x79/0x370 [ 2758.544124] ? trace_probe_init+0x284/0x4e0 [ 2758.544159] kstrdup+0x36/0x70 [ 2758.544184] trace_probe_init+0x284/0x4e0 [ 2758.544217] alloc_trace_uprobe+0x63/0x2b0 [ 2758.544241] create_local_trace_uprobe+0x101/0x4e0 [ 2758.544261] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2758.544284] ? memdup_user+0x7c/0xd0 [ 2758.544310] perf_uprobe_init+0x136/0x210 [ 2758.544336] perf_uprobe_event_init+0xff/0x1d0 [ 2758.544357] perf_try_init_event+0x130/0x570 [ 2758.544379] perf_event_alloc.part.0+0xd96/0x2b70 [ 2758.544410] __do_sys_perf_event_open+0x579/0x2e60 [ 2758.544440] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2758.544460] ? perf_event_set_output+0x5b0/0x5b0 [ 2758.544477] ? wait_for_completion_io+0x270/0x270 [ 2758.544523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.544540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.544571] do_syscall_64+0x33/0x40 [ 2758.544587] entry_SYSCALL_64_after_hwframe+0x62/0xc7 23:36:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0xf, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2758.544600] RIP: 0033:0x7f5ced6c7b19 [ 2758.544620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:36:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 19) [ 2758.544630] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2758.544650] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2758.544661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2758.544672] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.544683] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2758.544694] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2758.544849] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 2758.565031] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r1, r2]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2200) 23:36:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1403e800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 23:36:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2758.863487] FAULT_INJECTION: forcing a failure. [ 2758.863487] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.865349] CPU: 0 PID: 15565 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2758.866475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.867837] Call Trace: [ 2758.868278] dump_stack+0x107/0x167 [ 2758.868881] should_fail.cold+0x5/0xa [ 2758.869512] ? create_object.isra.0+0x3a/0xa20 [ 2758.870265] should_failslab+0x5/0x20 [ 2758.870889] kmem_cache_alloc+0x5b/0x310 [ 2758.871517] create_object.isra.0+0x3a/0xa20 [ 2758.872246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.873028] __kmalloc_track_caller+0x177/0x370 [ 2758.873736] ? trace_probe_init+0x284/0x4e0 [ 2758.874407] kstrdup+0x36/0x70 [ 2758.874905] trace_probe_init+0x284/0x4e0 [ 2758.875549] alloc_trace_uprobe+0x63/0x2b0 [ 2758.876209] create_local_trace_uprobe+0x101/0x4e0 [ 2758.876969] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2758.877672] ? memdup_user+0x7c/0xd0 [ 2758.878252] perf_uprobe_init+0x136/0x210 [ 2758.878895] perf_uprobe_event_init+0xff/0x1d0 [ 2758.879594] perf_try_init_event+0x130/0x570 [ 2758.880281] perf_event_alloc.part.0+0xd96/0x2b70 [ 2758.881032] __do_sys_perf_event_open+0x579/0x2e60 [ 2758.881792] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2758.882527] ? perf_event_set_output+0x5b0/0x5b0 [ 2758.883246] ? wait_for_completion_io+0x270/0x270 [ 2758.884021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.884817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.885609] do_syscall_64+0x33/0x40 [ 2758.886181] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2758.886954] RIP: 0033:0x7f5ced6c7b19 [ 2758.887522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.890280] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2758.891434] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2758.892521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2758.893595] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.894669] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2758.895749] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2758.932140] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2758.979955] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 20) 23:36:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) signalfd(r0, &(0x7f0000000000)={[0x40]}, 0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 23:36:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x20000390, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1401f400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r1, r2]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2300) 23:36:29 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socket$packet(0x11, 0x3, 0x300) [ 2772.602606] FAULT_INJECTION: forcing a failure. [ 2772.602606] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.603806] CPU: 0 PID: 15593 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2772.604499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.605378] Call Trace: [ 2772.605658] dump_stack+0x107/0x167 [ 2772.606056] should_fail.cold+0x5/0xa [ 2772.606487] ? create_object.isra.0+0x3a/0xa20 [ 2772.606975] should_failslab+0x5/0x20 [ 2772.607385] kmem_cache_alloc+0x5b/0x310 [ 2772.607838] create_object.isra.0+0x3a/0xa20 [ 2772.608322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.608882] __kmalloc_track_caller+0x177/0x370 [ 2772.609381] ? create_local_trace_uprobe+0x1af/0x4e0 [ 2772.609915] kstrdup+0x36/0x70 [ 2772.610278] create_local_trace_uprobe+0x1af/0x4e0 [ 2772.610830] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2772.611314] ? memdup_user+0x7c/0xd0 [ 2772.611725] perf_uprobe_init+0x136/0x210 [ 2772.612175] perf_uprobe_event_init+0xff/0x1d0 [ 2772.612639] perf_try_init_event+0x130/0x570 [ 2772.613103] perf_event_alloc.part.0+0xd96/0x2b70 [ 2772.613603] __do_sys_perf_event_open+0x579/0x2e60 [ 2772.614137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2772.614624] ? perf_event_set_output+0x5b0/0x5b0 [ 2772.615099] ? wait_for_completion_io+0x270/0x270 [ 2772.615614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.616161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.616698] do_syscall_64+0x33/0x40 [ 2772.617102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2772.617625] RIP: 0033:0x7f5ced6c7b19 [ 2772.618031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.619997] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2772.620760] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2772.621465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2772.622182] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.622921] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2772.623692] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2772.627491] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2772.662503] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 21) 23:36:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r1, r2]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2772.742064] FAULT_INJECTION: forcing a failure. [ 2772.742064] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.743949] CPU: 1 PID: 15608 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2772.745070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.746413] Call Trace: [ 2772.746851] dump_stack+0x107/0x167 [ 2772.747450] should_fail.cold+0x5/0xa [ 2772.748090] ? traceprobe_set_print_fmt+0x5a/0xd0 [ 2772.748924] should_failslab+0x5/0x20 [ 2772.749544] __kmalloc+0x72/0x390 [ 2772.750110] ? __kmalloc_track_caller+0x2c6/0x370 [ 2772.750901] traceprobe_set_print_fmt+0x5a/0xd0 [ 2772.751660] create_local_trace_uprobe+0x309/0x4e0 [ 2772.752481] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2772.753230] ? memdup_user+0x7c/0xd0 [ 2772.753847] perf_uprobe_init+0x136/0x210 [ 2772.754529] perf_uprobe_event_init+0xff/0x1d0 [ 2772.755327] perf_try_init_event+0x130/0x570 [ 2772.756087] perf_event_alloc.part.0+0xd96/0x2b70 [ 2772.756881] __do_sys_perf_event_open+0x579/0x2e60 [ 2772.757683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2772.758462] ? perf_event_set_output+0x5b0/0x5b0 [ 2772.759325] ? wait_for_completion_io+0x270/0x270 [ 2772.760323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.761239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.762184] do_syscall_64+0x33/0x40 [ 2772.762971] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2772.763949] RIP: 0033:0x7f5ced6c7b19 [ 2772.764738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.768133] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2772.769581] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2772.770869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2772.772148] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.773417] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2772.774742] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:36:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000001000000000000000000"]) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_mtu}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcbddf3c51240fc492617c114cb5f2d087502b63a6279c9da1c650d57681487060f3813524500000"], 0x58) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x1f, 0x7, 0x22, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x20, 0x9, 0x2}}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e21, 0xff, 0x4e20, 0xbd, 0xa, 0xa0, 0xa0, 0x1, r4, r5}, {0x0, 0x80000000, 0x4, 0x40, 0x7, 0x1, 0x3, 0x1}, {0x1, 0x20000000000, 0x1, 0xffff}, 0x8, 0x6e6bbc, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3500, 0x3, 0x2, 0xa0, 0x400, 0x1, 0x200}}, 0xe8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:36:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41888}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2) 23:36:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2400) 23:36:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x20001610, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2772.835032] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 22) [ 2772.986965] FAULT_INJECTION: forcing a failure. [ 2772.986965] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.990584] CPU: 1 PID: 15628 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2772.992106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.993908] Call Trace: [ 2772.994448] dump_stack+0x107/0x167 [ 2772.995185] should_fail.cold+0x5/0xa [ 2772.996151] ? create_object.isra.0+0x3a/0xa20 [ 2772.997199] should_failslab+0x5/0x20 [ 2772.998115] kmem_cache_alloc+0x5b/0x310 [ 2772.999111] create_object.isra.0+0x3a/0xa20 [ 2773.000141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2773.001334] __kmalloc+0x16e/0x390 [ 2773.002168] ? __kmalloc_track_caller+0x2c6/0x370 [ 2773.003348] traceprobe_set_print_fmt+0x5a/0xd0 [ 2773.004476] create_local_trace_uprobe+0x309/0x4e0 [ 2773.005725] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2773.006780] ? memdup_user+0x7c/0xd0 [ 2773.007679] perf_uprobe_init+0x136/0x210 [ 2773.008601] perf_uprobe_event_init+0xff/0x1d0 [ 2773.009628] perf_try_init_event+0x130/0x570 [ 2773.010595] perf_event_alloc.part.0+0xd96/0x2b70 [ 2773.011750] __do_sys_perf_event_open+0x579/0x2e60 [ 2773.012842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2773.013961] ? perf_event_set_output+0x5b0/0x5b0 [ 2773.014899] ? wait_for_completion_io+0x270/0x270 [ 2773.015928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2773.016972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2773.018010] do_syscall_64+0x33/0x40 [ 2773.018759] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2773.019777] RIP: 0033:0x7f5ced6c7b19 [ 2773.020534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2773.024137] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2773.025644] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2773.027049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2773.028463] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.029866] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2773.031272] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2773.126326] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 23) 23:36:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14004003000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x20000390, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2500) 23:36:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/mcfilter6\x00') [ 2788.757363] FAULT_INJECTION: forcing a failure. [ 2788.757363] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.758319] CPU: 0 PID: 15648 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2788.758842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2788.759473] Call Trace: [ 2788.759682] dump_stack+0x107/0x167 [ 2788.759963] should_fail.cold+0x5/0xa [ 2788.760285] ? create_object.isra.0+0x3a/0xa20 [ 2788.760638] should_failslab+0x5/0x20 [ 2788.760929] kmem_cache_alloc+0x5b/0x310 [ 2788.761251] create_object.isra.0+0x3a/0xa20 [ 2788.761589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2788.761982] __kmalloc+0x16e/0x390 [ 2788.762259] ? __kmalloc_track_caller+0x2c6/0x370 [ 2788.762636] traceprobe_set_print_fmt+0x5a/0xd0 [ 2788.762994] create_local_trace_uprobe+0x309/0x4e0 [ 2788.763379] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2788.763734] ? memdup_user+0x7c/0xd0 [ 2788.764025] perf_uprobe_init+0x136/0x210 [ 2788.764364] perf_uprobe_event_init+0xff/0x1d0 [ 2788.764716] perf_try_init_event+0x130/0x570 [ 2788.765053] perf_event_alloc.part.0+0xd96/0x2b70 [ 2788.765433] __do_sys_perf_event_open+0x579/0x2e60 [ 2788.765813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2788.766184] ? perf_event_set_output+0x5b0/0x5b0 [ 2788.766549] ? wait_for_completion_io+0x270/0x270 23:36:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2788.766936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.767495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2788.767907] do_syscall_64+0x33/0x40 [ 2788.768222] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2788.768627] RIP: 0033:0x7f5ced6c7b19 [ 2788.769037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2788.769527] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2788.770491] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2788.770504] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2788.770511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2788.770517] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.770523] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2788.770529] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2788.795992] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x5c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffff8, 0x408940) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x5}, 0x4) 23:36:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000008000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 24) 23:36:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2600) 23:36:45 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d6c6f6f73652c00fff33c6ef7e21d32b77d93a016c1e2aa60be22b45d1eba3c8f7bc352fd7cdd2216b65ebf193f9ecd23e1ba7c525f0043e655d4a1c1f29d13cb87db9c4f261d4ee192cbffe109c23b804e4617b1c7803878836449ff02e6e5eb71876207f09854f4cb571f696421cfc064a832565fcadfb240b70e165e0711aed481bcfc29f623c7e45f4579766d1a702573a5c6dd00632286ecb067b880ea7cb6eff78d3d2504dcf5164d97c34c6d57d2e1b4129f95"]) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x40) [ 2788.956733] FAULT_INJECTION: forcing a failure. [ 2788.956733] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.958410] CPU: 1 PID: 15659 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2788.959321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2788.960431] Call Trace: [ 2788.960793] dump_stack+0x107/0x167 [ 2788.961279] should_fail.cold+0x5/0xa [ 2788.961787] ? create_object.isra.0+0x3a/0xa20 [ 2788.962394] should_failslab+0x5/0x20 [ 2788.962958] kmem_cache_alloc+0x5b/0x310 [ 2788.963531] ? mark_held_locks+0x9e/0xe0 [ 2788.964137] create_object.isra.0+0x3a/0xa20 [ 2788.964829] kmemleak_alloc_percpu+0xa0/0x100 [ 2788.965476] pcpu_alloc+0x4e2/0x1240 [ 2788.966069] perf_trace_event_init+0x376/0x9c0 [ 2788.966728] ? memdup_user+0x7c/0xd0 [ 2788.967301] perf_uprobe_init+0x173/0x210 [ 2788.967897] perf_uprobe_event_init+0xff/0x1d0 [ 2788.968588] perf_try_init_event+0x130/0x570 [ 2788.969228] perf_event_alloc.part.0+0xd96/0x2b70 [ 2788.969978] __do_sys_perf_event_open+0x579/0x2e60 [ 2788.970645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2788.971380] ? perf_event_set_output+0x5b0/0x5b0 [ 2788.972004] ? wait_for_completion_io+0x270/0x270 [ 2788.972758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.973490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2788.974187] do_syscall_64+0x33/0x40 [ 2788.974737] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2788.975458] RIP: 0033:0x7f5ced6c7b19 [ 2788.975951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2788.978339] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2788.979333] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2788.980269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2788.981202] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.982132] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2788.983059] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2789.018990] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2789.028822] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2700) 23:36:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 25) 23:36:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x11, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000026c0), 0x200200, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000002700)={0x3, 0x2}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0xaa, 0x200, 0x8001, 0x8, 0x5, 0x5, 0x7fff}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:36:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x5c4}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000040000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:58 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = creat(0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001a00)) accept4(0xffffffffffffffff, &(0x7f0000001a40)=@rc={0x1f, @fixed}, &(0x7f0000001ac0)=0x80, 0x100800) sendmsg$AUDIT_USER_TTY(r3, 0x0, 0x4) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0xc2080, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}], [{@smackfstransmute={'smackfstransmute', 0x3d, ','}}]}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x5cb0e84d290e3d4f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendfile(r0, r2, 0x0, 0x20d315) [ 2802.365974] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2802.370525] FAULT_INJECTION: forcing a failure. [ 2802.370525] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.372207] CPU: 0 PID: 15695 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2802.373299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2802.374477] Call Trace: [ 2802.374864] dump_stack+0x107/0x167 [ 2802.375391] should_fail.cold+0x5/0xa [ 2802.375947] ? create_object.isra.0+0x3a/0xa20 [ 2802.376617] should_failslab+0x5/0x20 [ 2802.377176] kmem_cache_alloc+0x5b/0x310 [ 2802.377768] create_object.isra.0+0x3a/0xa20 [ 2802.378413] kmemleak_alloc_percpu+0xa0/0x100 [ 2802.379069] pcpu_alloc+0x4e2/0x1240 [ 2802.379630] probe_event_enable+0x537/0xa20 [ 2802.380238] ? uprobe_perf_close+0x5f0/0x5f0 [ 2802.380861] ? pcpu_alloc+0x12a/0x1240 [ 2802.381406] trace_uprobe_register+0x54/0x730 [ 2802.382063] perf_trace_event_init+0x554/0x9c0 [ 2802.382731] perf_uprobe_init+0x173/0x210 [ 2802.383337] perf_uprobe_event_init+0xff/0x1d0 [ 2802.383996] perf_try_init_event+0x130/0x570 [ 2802.384639] perf_event_alloc.part.0+0xd96/0x2b70 [ 2802.385347] __do_sys_perf_event_open+0x579/0x2e60 [ 2802.386026] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2802.386719] ? perf_event_set_output+0x5b0/0x5b0 [ 2802.387395] ? wait_for_completion_io+0x270/0x270 [ 2802.388116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2802.388878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2802.389621] do_syscall_64+0x33/0x40 [ 2802.390159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.390883] RIP: 0033:0x7f5ced6c7b19 [ 2802.391419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2802.394053] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2802.395144] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2802.396167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2802.397185] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.398198] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2802.399213] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2802.404725] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r2, r1, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:36:58 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:36:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xb80}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950a, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:36:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000340000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:36:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 26) 23:36:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2800) [ 2802.631027] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:36:59 executing program 6: getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2802.709553] FAULT_INJECTION: forcing a failure. [ 2802.709553] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.711013] CPU: 0 PID: 15718 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2802.711895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2802.712861] Call Trace: [ 2802.713177] dump_stack+0x107/0x167 [ 2802.713624] should_fail.cold+0x5/0xa [ 2802.714103] ? create_object.isra.0+0x3a/0xa20 [ 2802.714650] should_failslab+0x5/0x20 [ 2802.715098] kmem_cache_alloc+0x5b/0x310 [ 2802.715589] ? mark_held_locks+0x9e/0xe0 [ 2802.716090] create_object.isra.0+0x3a/0xa20 [ 2802.716633] kmemleak_alloc_percpu+0xa0/0x100 [ 2802.717173] pcpu_alloc+0x4e2/0x1240 [ 2802.717634] probe_event_enable+0x537/0xa20 [ 2802.718165] ? uprobe_perf_close+0x5f0/0x5f0 [ 2802.718687] ? pcpu_alloc+0x12a/0x1240 [ 2802.719158] trace_uprobe_register+0x54/0x730 [ 2802.719699] perf_trace_event_init+0x554/0x9c0 [ 2802.720258] perf_uprobe_init+0x173/0x210 [ 2802.720767] perf_uprobe_event_init+0xff/0x1d0 [ 2802.721316] perf_try_init_event+0x130/0x570 [ 2802.721841] perf_event_alloc.part.0+0xd96/0x2b70 [ 2802.722421] __do_sys_perf_event_open+0x579/0x2e60 [ 2802.723015] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2802.723588] ? perf_event_set_output+0x5b0/0x5b0 [ 2802.724140] ? wait_for_completion_io+0x270/0x270 [ 2802.724759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2802.725394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2802.726010] do_syscall_64+0x33/0x40 [ 2802.726447] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.727051] RIP: 0033:0x7f5ced6c7b19 [ 2802.727487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2802.729631] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2802.730523] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2802.731365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2802.732225] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.733048] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2802.733886] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2802.751665] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:37:12 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000010000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r2, r1, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 27) 23:37:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x1140}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2900) 23:37:12 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x1, 0x9, 0xffffffff, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x65, 0x0, 0x80, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x8, 0xb3, 0x0, 0xd, [0x101]}]}}}}}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:37:12 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x2, 0x80}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2041100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84ce5ead936bace4}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffc0000}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="0b6dee6d2080d7fb65be9f0be263c88112", 0x11}, {&(0x7f00000001c0)='L', 0x1}, {0x0}], 0x3) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x119000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000540)=""/193, 0xc1, 0x9}) eventfd(0x4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r5, &(0x7f00000000c0)="d9", 0x1, 0x1005) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x83}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbb2c}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x28008101}, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x10c, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff5}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nolayytime,\x00']) [ 2815.915979] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2815.921993] FAULT_INJECTION: forcing a failure. [ 2815.921993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2815.922976] CPU: 1 PID: 15840 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2815.923487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.924172] Call Trace: [ 2815.924408] dump_stack+0x107/0x167 [ 2815.924710] should_fail.cold+0x5/0xa [ 2815.924999] __alloc_pages_nodemask+0x182/0x600 [ 2815.925345] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2815.925689] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2815.926130] ? pcpu_alloc+0x12a/0x1240 [ 2815.926428] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2815.926819] probe_event_enable+0x5b1/0xa20 [ 2815.927138] ? uprobe_perf_close+0x5f0/0x5f0 [ 2815.927473] trace_uprobe_register+0x54/0x730 [ 2815.927813] perf_trace_event_init+0x554/0x9c0 [ 2815.928156] perf_uprobe_init+0x173/0x210 [ 2815.928523] perf_uprobe_event_init+0xff/0x1d0 [ 2815.928860] perf_try_init_event+0x130/0x570 [ 2815.929185] perf_event_alloc.part.0+0xd96/0x2b70 [ 2815.929554] __do_sys_perf_event_open+0x579/0x2e60 [ 2815.929919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2815.930276] ? perf_event_set_output+0x5b0/0x5b0 [ 2815.930662] ? wait_for_completion_io+0x270/0x270 [ 2815.931068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.931457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.931839] do_syscall_64+0x33/0x40 [ 2815.932114] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2815.932500] RIP: 0033:0x7f5ced6c7b19 [ 2815.932777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.934108] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2815.934667] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2815.935185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2815.935703] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.936222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2815.936748] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:37:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 28) 23:37:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2816.013223] FAULT_INJECTION: forcing a failure. [ 2816.013223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2816.014539] CPU: 1 PID: 15852 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2816.015230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.016056] Call Trace: [ 2816.016330] dump_stack+0x107/0x167 [ 2816.016622] should_fail.cold+0x5/0xa [ 2816.017014] __alloc_pages_nodemask+0x182/0x600 [ 2816.017366] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2816.017845] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2816.018301] ? lockdep_init_map_type+0x2c7/0x780 [ 2816.018784] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2816.019301] ? __raw_spin_lock_init+0x36/0x110 [ 2816.019678] probe_event_enable+0x5b1/0xa20 [ 2816.020116] ? uprobe_perf_close+0x5f0/0x5f0 [ 2816.020582] trace_uprobe_register+0x54/0x730 [ 2816.021041] perf_trace_event_init+0x554/0x9c0 [ 2816.021418] perf_uprobe_init+0x173/0x210 [ 2816.021850] perf_uprobe_event_init+0xff/0x1d0 [ 2816.022193] perf_try_init_event+0x130/0x570 [ 2816.022635] perf_event_alloc.part.0+0xd96/0x2b70 [ 2816.023131] __do_sys_perf_event_open+0x579/0x2e60 [ 2816.023535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2816.024017] ? perf_event_set_output+0x5b0/0x5b0 [ 2816.024407] ? wait_for_completion_io+0x270/0x270 [ 2816.024923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.025452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.025841] do_syscall_64+0x33/0x40 [ 2816.026218] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2816.026597] RIP: 0033:0x7f5ced6c7b19 [ 2816.026970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.028803] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2816.029564] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2816.030280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2816.030989] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.031701] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2816.032421] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 23:37:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2a00) 23:37:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x1700}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:12 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000020000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r2, r1, r3]}, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:12 executing program 6: prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/161, 0xa1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x8, 0x40, 0x6, 0x7}]}, 0x10) [ 2816.113644] kauditd_printk_skb: 39 callbacks suppressed [ 2816.113655] audit: type=1326 audit(1709077032.563:457): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.117955] audit: type=1326 audit(1709077032.563:458): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.134464] audit: type=1326 audit(1709077032.569:459): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.140258] audit: type=1326 audit(1709077032.569:460): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.153814] audit: type=1326 audit(1709077032.569:461): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.161981] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2816.173997] audit: type=1326 audit(1709077032.569:462): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.201755] audit: type=1326 audit(1709077032.569:463): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.204063] audit: type=1326 audit(1709077032.578:464): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.229878] audit: type=1326 audit(1709077032.579:465): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 [ 2816.237139] audit: type=1326 audit(1709077032.579:466): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15832 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43644aeb19 code=0x7ffc0000 23:37:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 29) 23:37:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:26 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x11, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6}, 0x10) 23:37:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x1cc0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r1 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x9, 0x0, 0x4, 0x8, 0xffffffff]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x818301, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0x94bd}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 23:37:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2b00) [ 2829.996039] FAULT_INJECTION: forcing a failure. [ 2829.996039] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.997362] CPU: 1 PID: 15985 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2829.998182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.999016] Call Trace: [ 2829.999294] dump_stack+0x107/0x167 [ 2829.999669] should_fail.cold+0x5/0xa [ 2830.000062] ? __uprobe_register+0x19c/0x880 [ 2830.000511] should_failslab+0x5/0x20 [ 2830.000908] kmem_cache_alloc_trace+0x55/0x320 [ 2830.001387] __uprobe_register+0x19c/0x880 [ 2830.001834] probe_event_enable+0x448/0xa20 [ 2830.002279] ? uprobe_perf_close+0x5f0/0x5f0 [ 2830.002736] trace_uprobe_register+0x54/0x730 [ 2830.003199] perf_trace_event_init+0x554/0x9c0 [ 2830.003670] perf_uprobe_init+0x173/0x210 [ 2830.004101] perf_uprobe_event_init+0xff/0x1d0 [ 2830.004576] perf_try_init_event+0x130/0x570 [ 2830.005024] perf_event_alloc.part.0+0xd96/0x2b70 [ 2830.005525] __do_sys_perf_event_open+0x579/0x2e60 [ 2830.006034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2830.006530] ? perf_event_set_output+0x5b0/0x5b0 [ 2830.007116] ? wait_for_completion_io+0x270/0x270 [ 2830.007635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.008167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.008704] do_syscall_64+0x33/0x40 [ 2830.009210] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2830.009785] RIP: 0033:0x7f5ced6c7b19 [ 2830.010168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.012020] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2830.012799] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2830.013611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2830.014335] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2830.015055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2830.015775] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2830.020698] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:37:26 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) [ 2830.112190] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 23:37:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 30) 23:37:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2280}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:26 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000040000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2c00) [ 2830.253513] FAULT_INJECTION: forcing a failure. [ 2830.253513] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.254834] CPU: 1 PID: 16003 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2830.255592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.256427] Call Trace: [ 2830.256716] dump_stack+0x107/0x167 [ 2830.257089] should_fail.cold+0x5/0xa [ 2830.257483] ? create_object.isra.0+0x3a/0xa20 [ 2830.257949] should_failslab+0x5/0x20 [ 2830.258339] kmem_cache_alloc+0x5b/0x310 [ 2830.258752] ? mark_held_locks+0x9e/0xe0 [ 2830.259170] create_object.isra.0+0x3a/0xa20 [ 2830.259620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2830.260138] kmem_cache_alloc_trace+0x151/0x320 [ 2830.260631] __uprobe_register+0x19c/0x880 [ 2830.261083] probe_event_enable+0x448/0xa20 [ 2830.261525] ? uprobe_perf_close+0x5f0/0x5f0 [ 2830.261980] trace_uprobe_register+0x54/0x730 [ 2830.262448] perf_trace_event_init+0x554/0x9c0 [ 2830.262922] perf_uprobe_init+0x173/0x210 [ 2830.263356] perf_uprobe_event_init+0xff/0x1d0 [ 2830.263827] perf_try_init_event+0x130/0x570 23:37:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) [ 2830.264279] perf_event_alloc.part.0+0xd96/0x2b70 [ 2830.264925] __do_sys_perf_event_open+0x579/0x2e60 [ 2830.265434] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2830.265928] ? perf_event_set_output+0x5b0/0x5b0 [ 2830.266408] ? wait_for_completion_io+0x270/0x270 [ 2830.266916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.267448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.267977] do_syscall_64+0x33/0x40 [ 2830.268359] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2830.268886] RIP: 0033:0x7f5ced6c7b19 [ 2830.269266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.271107] RSP: 002b:00007f5ceac3d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2830.271880] RAX: ffffffffffffffda RBX: 00007f5ced7daf60 RCX: 00007f5ced6c7b19 [ 2830.272608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2830.273324] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2830.274041] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2830.274759] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2830.275578] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2830.333325] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:37:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 31) 23:37:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:40 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r1 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x9, 0x0, 0x4, 0x8, 0xffffffff]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x818301, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0x94bd}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 23:37:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2d00) 23:37:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2840}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:40 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000050000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:40 executing program 6: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:37:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2843.798412] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2843.803007] FAULT_INJECTION: forcing a failure. [ 2843.803007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2843.804087] CPU: 1 PID: 16130 Comm: syz-executor.2 Not tainted 5.10.210 #1 [ 2843.804707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.805613] Call Trace: [ 2843.805851] dump_stack+0x107/0x167 [ 2843.806187] should_fail.cold+0x5/0xa [ 2843.806515] _copy_to_user+0x2e/0x180 [ 2843.806844] simple_read_from_buffer+0xcc/0x160 [ 2843.807263] proc_fail_nth_read+0x198/0x230 [ 2843.807634] ? proc_sessionid_read+0x230/0x230 [ 2843.808033] ? security_file_permission+0x24e/0x570 [ 2843.808457] ? perf_trace_initcall_start+0x101/0x380 [ 2843.808989] ? proc_sessionid_read+0x230/0x230 [ 2843.809417] vfs_read+0x228/0x580 [ 2843.809777] ksys_read+0x12d/0x260 [ 2843.810127] ? vfs_write+0xa70/0xa70 [ 2843.810522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.811021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.811553] do_syscall_64+0x33/0x40 [ 2843.811912] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.812447] RIP: 0033:0x7f5ced67a69c [ 2843.812839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2843.814704] RSP: 002b:00007f5ceac3d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2843.815487] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5ced67a69c [ 2843.816217] RDX: 000000000000000f RSI: 00007f5ceac3d1e0 RDI: 0000000000000004 [ 2843.816956] RBP: 00007f5ceac3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.817671] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2843.818389] R13: 00007ffcf4095eef R14: 00007f5ceac3d300 R15: 0000000000022000 [ 2843.841972] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2843.847987] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2843.848756] CPU: 1 PID: 16132 Comm: syz-executor.0 Not tainted 5.10.210 #1 [ 2843.849453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.850289] Call Trace: [ 2843.850569] dump_stack+0x107/0x167 [ 2843.850942] sysfs_warn_dup.cold+0x1c/0x29 [ 2843.851389] sysfs_do_create_link_sd+0x122/0x140 [ 2843.851871] sysfs_create_link+0x5f/0xc0 [ 2843.852287] device_add+0x703/0x1c50 [ 2843.852674] ? devlink_add_symlinks+0x970/0x970 [ 2843.853164] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2843.853710] wiphy_register+0x1da6/0x2850 [ 2843.854141] ? wiphy_unregister+0xb90/0xb90 [ 2843.854594] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2843.855136] ieee80211_register_hw+0x23c5/0x38b0 [ 2843.855634] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2843.856118] ? net_generic+0xdb/0x2b0 [ 2843.856517] ? lockdep_init_map_type+0x2c7/0x780 [ 2843.857010] ? memset+0x20/0x50 [ 2843.857366] ? __hrtimer_init+0x12c/0x270 [ 2843.857798] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2843.858316] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2843.858782] ? hwsim_new_radio_nl+0x967/0x1080 [ 2843.859250] ? memcpy+0x39/0x60 [ 2843.859604] hwsim_new_radio_nl+0x991/0x1080 [ 2843.860057] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2843.860599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2843.861275] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2843.861946] genl_family_rcv_msg_doit+0x22d/0x330 [ 2843.862443] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2843.863108] ? cap_capable+0x1cd/0x230 [ 2843.863520] ? ns_capable+0xe2/0x110 [ 2843.863909] genl_rcv_msg+0x33c/0x5a0 [ 2843.864307] ? genl_get_cmd+0x480/0x480 [ 2843.864726] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2843.865251] ? lock_release+0x680/0x680 [ 2843.865563] ? __lockdep_reset_lock+0x180/0x180 [ 2843.865943] netlink_rcv_skb+0x14b/0x430 [ 2843.866283] ? genl_get_cmd+0x480/0x480 [ 2843.866596] ? netlink_ack+0xab0/0xab0 [ 2843.866905] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2843.867289] ? is_vmalloc_addr+0x7b/0xb0 [ 2843.867609] genl_rcv+0x24/0x40 [ 2843.867864] netlink_unicast+0x549/0x7f0 [ 2843.868208] ? netlink_attachskb+0x870/0x870 [ 2843.868566] netlink_sendmsg+0x90f/0xdf0 [ 2843.868930] ? netlink_unicast+0x7f0/0x7f0 [ 2843.869301] ? netlink_unicast+0x7f0/0x7f0 [ 2843.869638] __sock_sendmsg+0x154/0x190 [ 2843.869987] ____sys_sendmsg+0x70d/0x870 [ 2843.870304] ? sock_write_iter+0x3d0/0x3d0 [ 2843.870737] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.871127] ? perf_trace_lock+0xac/0x490 [ 2843.871560] ? __lockdep_reset_lock+0x180/0x180 [ 2843.872033] ? __lock_acquire+0xbb1/0x5b00 [ 2843.872473] ___sys_sendmsg+0xf3/0x170 [ 2843.872882] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.873358] ? lock_downgrade+0x6d0/0x6d0 [ 2843.873793] ? __lockdep_reset_lock+0x180/0x180 [ 2843.874275] ? futex_exit_release+0x220/0x220 [ 2843.874741] ? __fget_files+0x296/0x4c0 [ 2843.875165] ? __fget_light+0xea/0x290 [ 2843.875584] __sys_sendmsg+0xe5/0x1b0 [ 2843.875987] ? __sys_sendmsg_sock+0x40/0x40 [ 2843.876428] ? __do_sys_futex+0x2bb/0x480 [ 2843.876870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.877404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.877924] ? trace_hardirqs_on+0x5b/0x180 [ 2843.878376] do_syscall_64+0x33/0x40 [ 2843.878760] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.879284] RIP: 0033:0x7f43644aeb19 [ 2843.879666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.881529] RSP: 002b:00007f4361a24188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2843.882301] RAX: ffffffffffffffda RBX: 00007f43645c1f60 RCX: 00007f43644aeb19 [ 2843.883030] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2843.883749] RBP: 00007f4364508f6d R08: 0000000000000000 R09: 0000000000000000 [ 2843.884469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2843.885193] R13: 00007ffc69640bcf R14: 00007f4361a24300 R15: 0000000000022000 23:37:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:40 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:37:40 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000060000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:37:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2e00) 23:37:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2e00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2844.103869] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2844.153838] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:37:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2e82) 23:37:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x33c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:54 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000070000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:54 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x140) getsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x3}, 0x4) r2 = socket(0x2b, 0x80000, 0x8001) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) close(r3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xffff9d37, @loopback, 0xffff}, 0x1c) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:37:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_io_uring_complete(0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@private1, 0x3c}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x2, 0x8, 0x62, @mcast1, @mcast2, 0x80, 0x1, 0x2f9cb96d, 0x3f}}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x1, 0x5, 0x5, 0x0, 0x2, 0x8100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x50000, 0x40, 0x3ff, 0x3, 0xfffffffffffffffc, 0x6, 0x101, 0x0, 0x2, 0x0, 0xf5}, r3, 0xd, r1, 0xa) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x60) [ 2857.681264] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:37:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:37:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2f00) 23:37:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:37:54 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:37:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x3980}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2858.068387] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:08 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040)=0x7fff, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1}, 0x4) 23:38:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x3f40}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3000) 23:38:08 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000030d0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x46e2, 0x88) ftruncate(r0, 0xa44b) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x2013, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) syz_io_uring_complete(r1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) creat(&(0x7f00000002c0)='./file1\x00', 0x40) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x11) openat(r2, &(0x7f0000000280)='./file1\x00', 0x2400, 0x10a) 23:38:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x80800) 23:38:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2871.970505] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0xa, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:08 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000e0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x80800) 23:38:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3100) 23:38:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x4500}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d}) r1 = syz_io_uring_setup(0x3ac4, &(0x7f0000000240), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) fallocate(r5, 0x2, 0x8, 0x401) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:38:08 executing program 6: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)=""/243, &(0x7f0000000140)=0xf3) r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x8000}, 0x4) 23:38:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2872.377045] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:22 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x14, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7f, 0x5, 0x1, 0xe0, 0x0, 0x9bd6, 0x10208, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0xc1a1, 0x1, 0x3, 0x9, 0x1ff, 0x8, 0x400, 0x0, 0x3, 0x0, 0xfff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x3}, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'macvlan0\x00'}) r1 = eventfd(0x401) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "6908e9136025950b37d74ac94389a37685ddc3c3"}, 0x15, 0x0) 23:38:22 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000400000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:22 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x6, 0x0) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x33}, &(0x7f0000000140)=""/194, 0xc2, &(0x7f0000000240), &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r2], 0x3, {r1}}, 0x58) r3 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) socket$packet(0x11, 0x2, 0x300) 23:38:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x4ac0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3200) 23:38:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x80800) [ 2886.088345] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:22 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x74, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0x0, 0x80800) 23:38:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3300) 23:38:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="f7", 0x1}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000040)={r1, r0, 0x6}) 23:38:22 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000600000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:22 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) [ 2886.349911] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x5080}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14ffffff970000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:39 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0xc1, 0x3, 0x2, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x10, 0x80000000, 0x6}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:38:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0x0, 0x80800) 23:38:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3400) 23:38:39 executing program 0: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) readahead(0xffffffffffffffff, 0x0, 0x4) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x4, &(0x7f0000000240)=[{0x0, 0x0, 0xaa2}, {&(0x7f0000000140)="4ee55edaf9ee575b3f07973ca9408b71fccccb4da5d251119b92b362fb59435e86bd5dd954533ff780adae253a0143fc75d8d821e44ac20aa183d3934af72960f381e997bf2d99370eb1e08acfdf896a4f21f8aa7a9f63e818bd14b100327f19e6338125a0cf76feba26894d5ecad39d30663de70fb1d5a325cd72e50d643f663382f1f038ed8e8df197ed4adbfef987544698f6c0ca722fdada4c2a14b10f5d3f18bc3dc3a9a80f871cb0ddcfdf38623b9f2469c57f5486bc5cbb43407ad5b3839a267f84bf227b4f845b", 0xcb, 0x40}, {&(0x7f00000002c0)="e750f4f6cffcf008842d38453e79345787503406c70a1a66a81fa99d5efbbd891707388d16a8268e8d43cf11110f7f0e384b537bd6055da6e25a79be0370b23c71af8ba3e72ebdc24296b4fc0c0360a5a3ddb8412d67bbb10889a31affafc590", 0x60}, {&(0x7f0000000340), 0x0, 0x4}], 0x1, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@commit={'commit', 0x3d, 0x7fffffff}}, {@grpid}, {@orlov}, {@grpquota}, {@noacl}, {@usrjquota}, {@mblk_io_submit}, {@jqfmt_vfsold}], [{@hash}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '({.'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r1}}]}) faccessat2(r2, &(0x7f0000000500)='./file0\x00', 0x90, 0x300) syz_read_part_table(0xf1, 0x2, &(0x7f0000000640)=[{&(0x7f0000000540)="8da2cb00031d05addb4507c5d0ff4119bbe487a2894e81d46560efd5eef29f6bbbec9df39793808c466665d7f23a2c183bce79feb1845b0e67174de4d90e6792d68f5bcd4883c253cc38fdfddf1b41a3baf9bfab301835f05995344751aeacaec199a7fbeb25637081eb899f48cbd3a283a8955ca52ce5859059c39fb832b2cd4819795bc0ca3b07ee2ab57e7def469a55c75e8cb7045615245c348df9e18629945b55d8a5bd52bec95dc97463f5576476cc9c", 0xb3, 0x2}, {&(0x7f0000000600)="1dfd816b7518d10325e523e8fbf1db6f137fe22aad7fa0e5f8d7f0bf18ae26c0c1616776a541aaa0feeda0612c408d3a", 0x30, 0x101}]) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x202c1, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000440)) 23:38:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2903.521422] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2903.537445] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:40 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "e577e427aa02fb4d2716c559150d3c45"}, 0x11, 0x3) 23:38:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0x0, 0x80800) 23:38:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3500) 23:38:40 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005c00000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x5640}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2903.732263] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2903.891221] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005d80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3600) 23:38:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x27, 0x5}, 0x4) 23:38:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x5c00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) 23:38:55 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4) ioctl$CDROM_SELECT_SPEED(r4, 0x2272, 0x20000001) [ 2919.080383] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2919.084131] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:38:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) 23:38:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005e60000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:38:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:55 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform', 0x301000, 0x9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:38:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3700) 23:38:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x61c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2919.281203] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2919.310827] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:38:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x6780}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:10 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002e70000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:10 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:39:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3800) 23:39:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) 23:39:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000003c0)={0x1c, r1, 0x939f0c73e17edec1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xbc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) sendfile(r3, r4, 0x0, 0xffe3) [ 2933.786401] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2933.803985] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:10 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:10 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003e80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x9) 23:39:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3900) 23:39:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x6d40}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2933.965749] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:10 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0100001a0001000000000000000000fe88ff0f000000000000000001000001000000000000000000000000000000000000955e00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c00140073686132353600"/244], 0x13c}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xc3, 0x20}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x6, 0x40, 0x1, 0x0, 0x3, 0x20000, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x401, 0xffffffffffffff81, 0x4, 0x4, 0x1, 0x2, 0x7, 0x0, 0x3f, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) [ 2933.978505] FAULT_INJECTION: forcing a failure. [ 2933.978505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2933.980054] CPU: 0 PID: 16850 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2933.980809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2933.981613] Call Trace: [ 2933.981902] dump_stack+0x107/0x167 [ 2933.982279] should_fail.cold+0x5/0xa [ 2933.982685] _copy_from_user+0x2e/0x1b0 [ 2933.983101] perf_copy_attr+0x11a/0x8a0 [ 2933.983519] __do_sys_perf_event_open+0xb9/0x2e60 [ 2933.984016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2933.984506] ? perf_event_set_output+0x5b0/0x5b0 [ 2933.984993] ? wait_for_completion_io+0x270/0x270 [ 2933.985515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2933.986066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2933.986591] do_syscall_64+0x33/0x40 [ 2933.986973] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2933.987484] RIP: 0033:0x7fdb8bc19b19 [ 2933.987861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2933.989683] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2933.990461] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2933.991180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2933.991897] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2933.992615] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2933.993333] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:39:10 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2934.196373] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:25 executing program 6: prctl$PR_SET_PDEATHSIG(0x1, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:39:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000440)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000022, &(0x7f0000003640)={0x0, 0x989680}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c84bffe1e2b35", @ANYRESHEX, @ANYBLOB="2c636169742d5f2a1816b2d3b064755b6368653d6d6d61702c63616368653d6c6f6f73652c000000000000ffff6163f3003d6d6d61702c667363006e746578743d737973613d212c6f626a5f747970653d63616368653d6c6f6f73652c00"/107]) llistxattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=""/194, 0xc2) 23:39:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:39:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3a00) 23:39:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x7300}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:25 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000001f40000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2949.251998] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2949.287483] FAULT_INJECTION: forcing a failure. [ 2949.287483] name failslab, interval 1, probability 0, space 0, times 0 [ 2949.289606] CPU: 0 PID: 16988 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2949.290840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2949.292281] Call Trace: [ 2949.292756] dump_stack+0x107/0x167 [ 2949.293411] should_fail.cold+0x5/0xa [ 2949.294118] ? perf_event_alloc.part.0+0x5b/0x2b70 23:39:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950a0000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2949.294984] should_failslab+0x5/0x20 [ 2949.295758] kmem_cache_alloc_trace+0x55/0x320 [ 2949.296670] perf_event_alloc.part.0+0x5b/0x2b70 [ 2949.297514] ? __alloc_fd+0x2b8/0x630 [ 2949.298250] __do_sys_perf_event_open+0x579/0x2e60 [ 2949.299137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2949.300000] ? perf_event_set_output+0x5b0/0x5b0 [ 2949.300843] ? wait_for_completion_io+0x270/0x270 [ 2949.301749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2949.302696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2949.303630] do_syscall_64+0x33/0x40 [ 2949.304308] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2949.305227] RIP: 0033:0x7fdb8bc19b19 [ 2949.305895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2949.309132] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2949.310493] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2949.311752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2949.313007] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2949.314274] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2949.315525] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 2949.320110] 9pnet: Insufficient options for proto=fd 23:39:25 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x30) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:39:25 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000fd0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x3b, 0x9, 0x6, 0x1f, 0x0, 0x65, 0x90000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x80, 0xfed}, 0x20, 0x7, 0x6d, 0x1, 0x2839, 0x481c, 0x0, 0x0, 0xfffffe01, 0x0, 0x6}) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0xd7, 0x4, 0x3, 0x0, 0x6, 0x22010, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10800, 0x5, 0x1ff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x1ff}, 0x0, 0xc, r0, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) openat$null(0xffffffffffffff9c, 0x0, 0xc000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') sendfile(r3, r4, &(0x7f00000001c0)=0x6, 0x5) 23:39:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3b00) 23:39:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:39:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x78c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2949.539469] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2949.588729] FAULT_INJECTION: forcing a failure. [ 2949.588729] name failslab, interval 1, probability 0, space 0, times 0 [ 2949.590408] CPU: 0 PID: 17016 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2949.591516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2949.592705] Call Trace: [ 2949.593096] dump_stack+0x107/0x167 [ 2949.593622] should_fail.cold+0x5/0xa [ 2949.594187] ? create_object.isra.0+0x3a/0xa20 [ 2949.594850] should_failslab+0x5/0x20 [ 2949.595403] kmem_cache_alloc+0x5b/0x310 [ 2949.595988] ? __lockdep_reset_lock+0x180/0x180 [ 2949.596658] create_object.isra.0+0x3a/0xa20 [ 2949.597291] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2949.598031] kmem_cache_alloc_trace+0x151/0x320 [ 2949.598707] perf_event_alloc.part.0+0x5b/0x2b70 [ 2949.599385] ? __alloc_fd+0x2b8/0x630 [ 2949.599973] __do_sys_perf_event_open+0x579/0x2e60 [ 2949.600700] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2949.601394] ? perf_event_set_output+0x5b0/0x5b0 [ 2949.602070] ? wait_for_completion_io+0x270/0x270 [ 2949.602792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2949.603540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2949.604281] do_syscall_64+0x33/0x40 [ 2949.604814] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2949.605539] RIP: 0033:0x7fdb8bc19b19 [ 2949.606088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2949.608712] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2949.609830] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2949.610870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2949.611907] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2949.612928] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2949.613963] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 2949.754980] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1497ffffff0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3c00) 23:39:39 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) 23:39:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x7e80}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:39:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) timer_gettime(r1, &(0x7f0000000280)) timer_gettime(r1, &(0x7f0000000080)) timer_gettime(r1, &(0x7f00000012c0)) timer_create(0x6, &(0x7f0000001180)={0x0, 0x10000036, 0x0, @thr={&(0x7f0000000080)="3fffef1a79e8d5172ba3eacc7658b4222310d5ab5e820eea52204ad99cc67ef9102205a6ff433c5e1098d449c6b4abe7ebd776814133eb9a193f9f563060d9d4734085d13df1d2c6e572440b215e1db30632b17ec7e559b69855f0fd025e2421986adf195fa9d09a81532de72caf3dedbe403de8a4101fe4a14ec3886bd68a52606caf4cdaad965f4e7accd8c114eaedff9054304d07f776a960e72cd5e1472358192a98b99a7fafe8fda8de3a336b60e72069bd7b4d35f4a2412b2df9a7a6876ece2f31054cacd9d2cd727b492cb8eb1507b2002e6a2d6a1bef45862cb9c287fb6c2d1ea6872bdcdc0585", &(0x7f0000000180)="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"}}, &(0x7f00000011c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001380)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="00010000000000002e2f66ebc02ed00089d47ec87749f215e677575acc1a1d573f53f3d47824b9085865698028b2c657eb1729c8fb67efd7bf9b5b7490bc6dbe5b7c40bda9f4ce9118f732b27221c0dabbaf082c07a7ff1021a6d3b56aa4211af1c5f02f8e5460900db4cef94129cd23aec056108a10d1e147"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001240)) timer_settime(r2, 0x0, &(0x7f0000001200)={{}, {0x77359400}}, 0x0) [ 2963.307676] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2963.317988] FAULT_INJECTION: forcing a failure. [ 2963.317988] name failslab, interval 1, probability 0, space 0, times 0 [ 2963.319558] CPU: 1 PID: 17142 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2963.320239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2963.321048] Call Trace: [ 2963.321321] dump_stack+0x107/0x167 [ 2963.321678] should_fail.cold+0x5/0xa [ 2963.322057] should_failslab+0x5/0x20 [ 2963.322457] __kmalloc_track_caller+0x79/0x370 [ 2963.322912] ? strndup_user+0x74/0xe0 [ 2963.323312] memdup_user+0x22/0xd0 [ 2963.323679] strndup_user+0x74/0xe0 [ 2963.324057] perf_uprobe_init+0x6b/0x210 [ 2963.324481] perf_uprobe_event_init+0xff/0x1d0 [ 2963.324927] perf_try_init_event+0x130/0x570 [ 2963.325381] perf_event_alloc.part.0+0xd96/0x2b70 [ 2963.325877] __do_sys_perf_event_open+0x579/0x2e60 [ 2963.326383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2963.326871] ? perf_event_set_output+0x5b0/0x5b0 [ 2963.327342] ? wait_for_completion_io+0x270/0x270 [ 2963.327851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2963.328372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2963.328890] do_syscall_64+0x33/0x40 [ 2963.329269] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2963.329772] RIP: 0033:0x7fdb8bc19b19 [ 2963.330160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2963.332232] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2963.333040] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2963.333932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2963.334750] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2963.335559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2963.336474] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:39:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:39 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$sock_int(r1, 0x1, 0x62, &(0x7f0000000000)=0xffff64a4, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xff, 0x6, 0x4, 0x0, 0x0, 0x0, 0x60a84, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xda9, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0xfffffffa, 0x1ff, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0xd5, 0x0, 0x48, 0x0, 0x8, 0x4008, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x1000, 0xffffffffffff8000, 0x6, 0x5, 0x4, 0x3, 0x4, 0x0, 0x8, 0x0, 0x772c43e8}, 0x0, 0x6, r2, 0xb) 23:39:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000008000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3d00) [ 2963.511421] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:52 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x97, 0x5259, 0x80000000, 0xffff98f1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 23:39:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3e00) 23:39:52 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000040000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:39:52 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000480)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0x6}, {0x0, 0x0, 0x1001000a00}, {&(0x7f00000001c0)="4712c4bffd58c39d0b838838a1a36247b1459f8bceac29a6123f90a27cad681de1578a659bd28f504986f1d435c5b08d7a88b33ae1b209ecdbba36ee003b3ad7e33e04e30bf5621b106769ba8a011268d6ff477c3fe1ccaac2dde870aa2ef5e478a3db144312cc95ba81198fca22793e49e0ac68ec2d95d901d54245f8991711c449a4e3e3cd1f79e179895f37d533edb4109832fcf5e958fef1c511563b345aa47552654891072bb7f72ff0a1503ffa24f858980aa5ed906bfac2e2b368fa18ce4e87a678368f2189318d608e8088ba0e2aa7bd1fd67bda", 0xd8, 0x1}, {&(0x7f00000002c0)="d836e932aa4cc3cdf0426d0125bfd63ef4d272c114188ba5509f4840798d383568cb51eaf95e1a6f63e0b8b99cd8a92bedf0e2acac6489e06db53b3475508b61a9223856252263aef73054448dbcfbdf944d38510280f5c3d29807509f53fffa7d9c82d99572d800e15601fb8d9c3501adc045f55ba9b786b9a9c993a184e64cad3641e75f2956b648e74a42f725ec9600daaea65410d1b1bc283daaaa7df1ed4790e9975d1fb511589950a077a32ca60366d65c7814a40a82fe8de79c6f308798898991ae54f1cfd54c", 0xca, 0x1f}, {&(0x7f00000003c0)="f0b08f72b5a310f48b29df955c0840bc2dafb096f9a708ca5405634e6847896111e858c92d698c635ee50d3085ee55f0dbe6505a58c32d70ee6c4d76553ea56ec663e3a8405d81805a36e3277a1080e4e3de1b8d6f29bebe672bf9bc5d263f8fe18a1ca2c6f2873780c91fdaba1a5e2d7393039ad2dbc8ee8be3f3f97cf29ac6cbbdb4870ae1a53acd40256149ff2850cdab26f442eaa5c4ba3ece574cc75ac1de96328f694e1a5b", 0xa8, 0x8}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000100)='./file0\x00', 0xa4900, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)=@random={'os2.', '\x00'}, &(0x7f0000000540)=""/4096, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) 23:39:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x26}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x8440}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2976.436216] FAULT_INJECTION: forcing a failure. [ 2976.436216] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.436235] CPU: 1 PID: 17276 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2976.436242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.436246] Call Trace: [ 2976.436265] dump_stack+0x107/0x167 [ 2976.436277] should_fail.cold+0x5/0xa [ 2976.436292] ? create_object.isra.0+0x3a/0xa20 [ 2976.436305] should_failslab+0x5/0x20 [ 2976.436317] kmem_cache_alloc+0x5b/0x310 [ 2976.436330] ? cred_has_capability.isra.0+0x143/0x2b0 [ 2976.436345] create_object.isra.0+0x3a/0xa20 [ 2976.436356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2976.436385] __kmalloc_track_caller+0x177/0x370 [ 2976.436401] ? strndup_user+0x74/0xe0 [ 2976.436420] memdup_user+0x22/0xd0 [ 2976.436432] strndup_user+0x74/0xe0 [ 2976.436447] perf_uprobe_init+0x6b/0x210 [ 2976.436464] perf_uprobe_event_init+0xff/0x1d0 [ 2976.436476] perf_try_init_event+0x130/0x570 [ 2976.436495] perf_event_alloc.part.0+0xd96/0x2b70 [ 2976.436523] __do_sys_perf_event_open+0x579/0x2e60 [ 2976.436552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.436570] ? perf_event_set_output+0x5b0/0x5b0 [ 2976.436584] ? wait_for_completion_io+0x270/0x270 [ 2976.436632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.436648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.436671] do_syscall_64+0x33/0x40 [ 2976.436685] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2976.436695] RIP: 0033:0x7fdb8bc19b19 [ 2976.436711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.436721] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2976.436740] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2976.436749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2976.436760] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.436769] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2976.436780] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 2976.437330] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2976.461881] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 2976.466260] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:39:52 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) 23:39:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3f00) 23:39:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff00000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:39:53 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000080000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2976.602418] FAULT_INJECTION: forcing a failure. [ 2976.602418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2976.603600] CPU: 0 PID: 17385 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2976.604170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.604857] Call Trace: [ 2976.605081] dump_stack+0x107/0x167 [ 2976.605427] should_fail.cold+0x5/0xa [ 2976.605764] _copy_from_user+0x2e/0x1b0 [ 2976.606172] memdup_user+0x65/0xd0 [ 2976.606517] strndup_user+0x74/0xe0 [ 2976.606831] perf_uprobe_init+0x6b/0x210 [ 2976.607247] perf_uprobe_event_init+0xff/0x1d0 [ 2976.607662] perf_try_init_event+0x130/0x570 [ 2976.608107] perf_event_alloc.part.0+0xd96/0x2b70 [ 2976.608549] __do_sys_perf_event_open+0x579/0x2e60 [ 2976.609061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.609457] ? perf_event_set_output+0x5b0/0x5b0 [ 2976.609867] ? wait_for_completion_io+0x270/0x270 [ 2976.610392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.610847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.611270] do_syscall_64+0x33/0x40 [ 2976.611635] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2976.612131] RIP: 0033:0x7fdb8bc19b19 [ 2976.612434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.613930] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2976.614579] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2976.615177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2976.615760] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.616362] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2976.616932] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:39:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x8a00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:39:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x4894) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYBLOB="250300000000000000000100000008000100000000000c0099000000000000000000"], 0x28}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x40}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 2976.780429] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:39:53 executing program 6: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x6}, 0x4) 23:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 2976.887990] FAULT_INJECTION: forcing a failure. [ 2976.887990] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.889269] CPU: 1 PID: 17412 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2976.889967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.890779] Call Trace: [ 2976.891052] dump_stack+0x107/0x167 [ 2976.891422] should_fail.cold+0x5/0xa [ 2976.891818] ? getname_kernel+0x4e/0x370 [ 2976.892235] should_failslab+0x5/0x20 [ 2976.892629] kmem_cache_alloc+0x5b/0x310 [ 2976.893032] ? lock_downgrade+0x6d0/0x6d0 [ 2976.893454] getname_kernel+0x4e/0x370 [ 2976.893857] kern_path+0x1b/0x40 [ 2976.894200] create_local_trace_uprobe+0x86/0x4e0 [ 2976.894690] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2976.895151] ? memdup_user+0x7c/0xd0 [ 2976.895534] perf_uprobe_init+0x136/0x210 [ 2976.895968] perf_uprobe_event_init+0xff/0x1d0 [ 2976.896431] perf_try_init_event+0x130/0x570 [ 2976.896872] perf_event_alloc.part.0+0xd96/0x2b70 [ 2976.897382] __do_sys_perf_event_open+0x579/0x2e60 [ 2976.897882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.898392] ? perf_event_set_output+0x5b0/0x5b0 [ 2976.898857] ? wait_for_completion_io+0x270/0x270 [ 2976.899383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.899901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.900435] do_syscall_64+0x33/0x40 [ 2976.900807] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2976.901325] RIP: 0033:0x7fdb8bc19b19 [ 2976.901698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.903495] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2976.904242] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2976.904944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2976.905651] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.906360] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2976.907066] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:40:06 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = creat(0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001a00)) accept4(0xffffffffffffffff, &(0x7f0000001a40)=@rc={0x1f, @fixed}, &(0x7f0000001ac0)=0x80, 0x100800) sendmsg$AUDIT_USER_TTY(r3, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20d315) 23:40:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:06 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000003400000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x4000) 23:40:06 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x8fc0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:06 executing program 6: r0 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000007c0)="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", 0x1000, 0xfffffffffffffffa) r1 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) [ 2989.966956] FAULT_INJECTION: forcing a failure. [ 2989.966956] name failslab, interval 1, probability 0, space 0, times 0 [ 2989.968791] CPU: 1 PID: 17523 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2989.969682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2989.970884] Call Trace: [ 2989.971237] dump_stack+0x107/0x167 [ 2989.971847] should_fail.cold+0x5/0xa [ 2989.972420] ? create_object.isra.0+0x3a/0xa20 [ 2989.973016] should_failslab+0x5/0x20 [ 2989.973506] kmem_cache_alloc+0x5b/0x310 [ 2989.974033] create_object.isra.0+0x3a/0xa20 [ 2989.974595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2989.975256] kmem_cache_alloc+0x159/0x310 [ 2989.975790] getname_kernel+0x4e/0x370 [ 2989.976297] kern_path+0x1b/0x40 [ 2989.976729] create_local_trace_uprobe+0x86/0x4e0 [ 2989.977348] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2989.977936] ? memdup_user+0x7c/0xd0 [ 2989.978449] perf_uprobe_init+0x136/0x210 [ 2989.979018] perf_uprobe_event_init+0xff/0x1d0 [ 2989.979688] perf_try_init_event+0x130/0x570 [ 2989.980438] perf_event_alloc.part.0+0xd96/0x2b70 [ 2989.981051] __do_sys_perf_event_open+0x579/0x2e60 [ 2989.981695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2989.982311] ? perf_event_set_output+0x5b0/0x5b0 [ 2989.983037] ? wait_for_completion_io+0x270/0x270 [ 2989.983941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2989.984591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2989.985265] do_syscall_64+0x33/0x40 [ 2989.985735] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2989.986392] RIP: 0033:0x7fdb8bc19b19 [ 2989.986881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2989.989288] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2989.990532] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2989.991414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2989.992305] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2989.993185] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2989.994079] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 2990.004249] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:06 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:06 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x102, 0x2000}, 0x4) 23:40:06 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000100000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2990.134336] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x5582) 23:40:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x2, 0x20, 0x1, 0x21c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), 0x0, 0x0, 0x1, &(0x7f0000001600)=[{0x0, 0x0, 0xf9}], 0x0, 0x0) 23:40:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x9580}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2990.206729] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 2990.360917] FAULT_INJECTION: forcing a failure. [ 2990.360917] name failslab, interval 1, probability 0, space 0, times 0 [ 2990.362179] CPU: 0 PID: 17664 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 2990.362898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2990.363739] Call Trace: [ 2990.364016] dump_stack+0x107/0x167 [ 2990.364403] should_fail.cold+0x5/0xa [ 2990.364793] ? igrab+0xc0/0xc0 [ 2990.365128] ? proc_self_get_link+0x18b/0x200 [ 2990.365596] should_failslab+0x5/0x20 [ 2990.365967] kmem_cache_alloc_trace+0x55/0x320 [ 2990.366455] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2990.366926] proc_self_get_link+0x18b/0x200 [ 2990.367369] step_into+0x1595/0x1ce0 [ 2990.367752] ? lookup_fast+0x6e0/0x6e0 [ 2990.368164] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2990.368633] walk_component+0x171/0x6a0 [ 2990.369035] ? trace_hardirqs_on+0x5b/0x180 [ 2990.369480] ? handle_dots.part.0+0x15c0/0x15c0 [ 2990.369968] ? security_inode_permission+0xcb/0x100 [ 2990.370482] link_path_walk.part.0+0x699/0xbf0 [ 2990.370968] ? walk_component+0x6a0/0x6a0 [ 2990.371396] ? perf_trace_lock+0xac/0x490 [ 2990.371823] path_lookupat+0xb7/0x860 [ 2990.372235] filename_lookup+0x1b1/0x570 [ 2990.372640] ? may_linkat+0x230/0x230 [ 2990.373052] ? trace_hardirqs_on+0x5b/0x180 [ 2990.373520] ? memcpy+0x39/0x60 [ 2990.373858] ? getname_kernel+0x21e/0x370 [ 2990.374287] create_local_trace_uprobe+0x86/0x4e0 [ 2990.374808] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 2990.375282] ? memdup_user+0x7c/0xd0 [ 2990.375672] perf_uprobe_init+0x136/0x210 [ 2990.376108] perf_uprobe_event_init+0xff/0x1d0 [ 2990.376573] perf_try_init_event+0x130/0x570 [ 2990.377034] perf_event_alloc.part.0+0xd96/0x2b70 [ 2990.377538] __do_sys_perf_event_open+0x579/0x2e60 [ 2990.378039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2990.378544] ? perf_event_set_output+0x5b0/0x5b0 [ 2990.379021] ? wait_for_completion_io+0x270/0x270 [ 2990.379535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2990.380071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2990.380604] do_syscall_64+0x33/0x40 [ 2990.380982] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2990.381513] RIP: 0033:0x7fdb8bc19b19 [ 2990.381897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2990.383725] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2990.384491] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 2990.385207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2990.385916] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2990.386633] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2990.387362] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 2990.491376] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x9b40}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x5682) 23:40:20 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) 23:40:20 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000200000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x3d1552a3eb7a0f35, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0xffff, 0x8, 0x40, 0x5731a00b, 0x4}) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80800) fork() fork() r3 = fork() ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x20032}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x4, 0xfa, 0xe2, 0x0, 0x1, 0x11c4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000008, 0x2, @perf_config_ext={0x1}, 0x8084, 0xda, 0x0, 0x0, 0x4, 0x792, 0x3, 0x0, 0x2e8, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x8000200a}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x60000007}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:40:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3003.670484] FAULT_INJECTION: forcing a failure. [ 3003.670484] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.671748] CPU: 1 PID: 17778 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3003.672474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3003.673343] Call Trace: [ 3003.673635] dump_stack+0x107/0x167 [ 3003.674035] should_fail.cold+0x5/0xa [ 3003.674446] ? find_held_lock+0x2c/0x110 [ 3003.674903] ? create_object.isra.0+0x3a/0xa20 [ 3003.675409] should_failslab+0x5/0x20 [ 3003.675821] kmem_cache_alloc+0x5b/0x310 [ 3003.676259] ? __task_pid_nr_ns+0x16a/0x4f0 [ 3003.676728] create_object.isra.0+0x3a/0xa20 [ 3003.677195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3003.677744] kmem_cache_alloc_trace+0x151/0x320 [ 3003.678242] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 3003.678728] proc_self_get_link+0x18b/0x200 [ 3003.679177] step_into+0x1595/0x1ce0 [ 3003.679590] ? lookup_fast+0x6e0/0x6e0 [ 3003.680009] ? try_to_unlazy_next+0x4f0/0x4f0 [ 3003.680490] walk_component+0x171/0x6a0 [ 3003.680900] ? trace_hardirqs_on+0x5b/0x180 [ 3003.681356] ? handle_dots.part.0+0x15c0/0x15c0 [ 3003.681856] ? security_inode_permission+0xcb/0x100 [ 3003.682400] link_path_walk.part.0+0x699/0xbf0 [ 3003.682907] ? walk_component+0x6a0/0x6a0 [ 3003.683358] ? perf_trace_lock+0xac/0x490 [ 3003.683814] path_lookupat+0xb7/0x860 [ 3003.684228] filename_lookup+0x1b1/0x570 [ 3003.684666] ? may_linkat+0x230/0x230 [ 3003.685104] ? trace_hardirqs_on+0x5b/0x180 [ 3003.685579] ? memcpy+0x39/0x60 [ 3003.685927] ? getname_kernel+0x21e/0x370 [ 3003.686479] create_local_trace_uprobe+0x86/0x4e0 [ 3003.687056] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3003.687546] ? memdup_user+0x7c/0xd0 [ 3003.687879] perf_uprobe_init+0x136/0x210 [ 3003.688242] perf_uprobe_event_init+0xff/0x1d0 [ 3003.688652] perf_try_init_event+0x130/0x570 [ 3003.689027] perf_event_alloc.part.0+0xd96/0x2b70 [ 3003.689434] __do_sys_perf_event_open+0x579/0x2e60 [ 3003.689851] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3003.690246] ? perf_event_set_output+0x5b0/0x5b0 [ 3003.690634] ? wait_for_completion_io+0x270/0x270 [ 3003.691070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3003.691502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3003.691951] do_syscall_64+0x33/0x40 [ 3003.692253] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3003.692670] RIP: 0033:0x7fdb8bc19b19 [ 3003.692978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3003.694461] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3003.695102] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3003.695686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3003.696322] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3003.696953] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3003.697592] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3003.704885] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:20 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) dup2(r0, r0) 23:40:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x6400) 23:40:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xa100}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3003.860294] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3003.906792] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:34 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='veth0_vlan\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x58) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x138, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) 23:40:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xa6c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:34 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) fallocate(r0, 0x60, 0x8, 0x6) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000002}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x5c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a3cf9b3c6cbdee19369852627b8c15a8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="50514a15d399"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048044}, 0x44080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 23:40:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x8102) 23:40:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:34 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000300000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3018.210043] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3018.225375] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3018.234133] FAULT_INJECTION: forcing a failure. [ 3018.234133] name failslab, interval 1, probability 0, space 0, times 0 [ 3018.235773] CPU: 1 PID: 17919 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3018.236476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3018.237306] Call Trace: [ 3018.237597] dump_stack+0x107/0x167 [ 3018.237984] should_fail.cold+0x5/0xa [ 3018.238392] ? alloc_trace_uprobe+0x3d/0x2b0 [ 3018.238857] should_failslab+0x5/0x20 [ 3018.239350] __kmalloc+0x72/0x390 [ 3018.239773] ? memcpy+0x39/0x60 [ 3018.240131] alloc_trace_uprobe+0x3d/0x2b0 [ 3018.240573] create_local_trace_uprobe+0x101/0x4e0 [ 3018.241085] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3018.241562] ? memdup_user+0x7c/0xd0 [ 3018.241953] perf_uprobe_init+0x136/0x210 [ 3018.242396] perf_uprobe_event_init+0xff/0x1d0 [ 3018.242892] perf_try_init_event+0x130/0x570 [ 3018.243354] perf_event_alloc.part.0+0xd96/0x2b70 [ 3018.243871] __do_sys_perf_event_open+0x579/0x2e60 [ 3018.244397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3018.244893] ? perf_event_set_output+0x5b0/0x5b0 [ 3018.245363] ? wait_for_completion_io+0x270/0x270 [ 3018.245882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3018.246413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3018.246951] do_syscall_64+0x33/0x40 [ 3018.247330] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3018.247849] RIP: 0033:0x7fdb8bc19b19 [ 3018.248230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3018.250046] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3018.250815] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3018.251519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3018.252219] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3018.252923] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3018.253632] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3018.254798] trace_uprobe: Failed to allocate trace_uprobe.(-12) 23:40:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:34 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x822e) 23:40:34 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x401) pread64(r2, &(0x7f0000000140)=""/219, 0xdb, 0x3) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x101, 0xd8, 0x4, 0x4}, {0x83d1, 0xe0, 0x0, 0x20}, {0x4, 0x9, 0x4, 0x5a}, {0xffe6, 0xaf, 0x3, 0x1}, {0x4, 0x2, 0x9, 0x4}]}, 0x10) 23:40:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xac80}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3018.450375] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3018.535830] FAULT_INJECTION: forcing a failure. [ 3018.535830] name failslab, interval 1, probability 0, space 0, times 0 [ 3018.537056] CPU: 1 PID: 17938 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3018.537754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3018.538580] Call Trace: [ 3018.538874] dump_stack+0x107/0x167 [ 3018.539251] should_fail.cold+0x5/0xa [ 3018.539644] ? create_object.isra.0+0x3a/0xa20 [ 3018.540108] should_failslab+0x5/0x20 [ 3018.540496] kmem_cache_alloc+0x5b/0x310 [ 3018.540915] create_object.isra.0+0x3a/0xa20 [ 3018.541354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3018.541870] __kmalloc+0x16e/0x390 [ 3018.542230] ? memcpy+0x39/0x60 [ 3018.542586] alloc_trace_uprobe+0x3d/0x2b0 [ 3018.543034] create_local_trace_uprobe+0x101/0x4e0 [ 3018.543546] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3018.544017] ? memdup_user+0x7c/0xd0 [ 3018.544411] perf_uprobe_init+0x136/0x210 [ 3018.544837] perf_uprobe_event_init+0xff/0x1d0 [ 3018.545303] perf_try_init_event+0x130/0x570 [ 3018.545752] perf_event_alloc.part.0+0xd96/0x2b70 [ 3018.546259] __do_sys_perf_event_open+0x579/0x2e60 [ 3018.546782] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3018.547283] ? perf_event_set_output+0x5b0/0x5b0 [ 3018.547764] ? wait_for_completion_io+0x270/0x270 [ 3018.548290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3018.548812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3018.549341] do_syscall_64+0x33/0x40 [ 3018.549723] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3018.550239] RIP: 0033:0x7fdb8bc19b19 [ 3018.550618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3018.552435] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3018.553191] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3018.553888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3018.554601] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3018.555341] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3018.556050] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:40:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3018.632469] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:35 executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x8000}, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="8ed0e9d786d77210c97fa1b903ac077e463c3187212d5f3d2734a1ca917277ab77eddfdb51864abbe6dba03de39d2703c7263198ea0eaa0ace19fd25e882f105fff6b2f10760af3efdba8f82891f8c82c05dc88043e3f3ffe24a609eede1525e2d6962c1fce4dec2152474486f5049899febec27a423af97a83d2194e2311c42789963a7b31026761cc2dcb5aacfcf46ec388743a207e0e2a235fa2d8e63e951f0817d167b6842477e3d0bb5066206037274d02a3fb0bbe4b6e336295fca70b1a96c14ba938a4d71c6023415e20fea905d22240b31ac268792b836dff8c86df3c327719c84113096aeb770c3", 0xec, 0x40, 0x0, 0x0) socket$packet(0x11, 0x1, 0x300) [ 3018.695854] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:35 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) fallocate(r0, 0x60, 0x8, 0x6) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000002}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x5c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a3cf9b3c6cbdee19369852627b8c15a8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="50514a15d399"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048044}, 0x44080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 23:40:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x8255) 23:40:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:35 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x1000, 0x5, 0x80, 0x8001}, {0xffc0, 0x1f, 0x7, 0xf1}, {0x7ff, 0x40, 0x3, 0x1}, {0xf75, 0x8, 0x7f, 0x923}, {0x5, 0xff, 0x7, 0x3}, {0x0, 0xe4, 0x20, 0xffff}, {0x41e, 0x1f, 0xa6, 0xfffffc01}, {0x20, 0x5, 0x7f, 0x5}]}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pnp', 0x80, 0x38) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x6, 0xf0, 0x6, 0x2}, {0x3, 0x2, 0x9, 0x1a4e}, {0x312, 0x8, 0x6}, {0x1, 0x20, 0x94, 0x1}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:40:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3018.873155] FAULT_INJECTION: forcing a failure. [ 3018.873155] name failslab, interval 1, probability 0, space 0, times 0 [ 3018.874276] CPU: 0 PID: 18064 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3018.874969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3018.875798] Call Trace: [ 3018.876082] dump_stack+0x107/0x167 [ 3018.876469] should_fail.cold+0x5/0xa [ 3018.876873] ? alloc_trace_uprobe+0x3d/0x2b0 [ 3018.877341] should_failslab+0x5/0x20 [ 3018.877735] __kmalloc+0x72/0x390 [ 3018.878099] ? memcpy+0x39/0x60 [ 3018.878459] alloc_trace_uprobe+0x3d/0x2b0 [ 3018.878925] create_local_trace_uprobe+0x101/0x4e0 [ 3018.879440] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3018.879918] ? memdup_user+0x7c/0xd0 [ 3018.880306] perf_uprobe_init+0x136/0x210 [ 3018.880741] perf_uprobe_event_init+0xff/0x1d0 [ 3018.881206] perf_try_init_event+0x130/0x570 [ 3018.881664] perf_event_alloc.part.0+0xd96/0x2b70 [ 3018.882153] __do_sys_perf_event_open+0x579/0x2e60 [ 3018.882684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3018.883165] ? perf_event_set_output+0x5b0/0x5b0 [ 3018.883656] ? wait_for_completion_io+0x270/0x270 [ 3018.884167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3018.884710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3018.885243] do_syscall_64+0x33/0x40 [ 3018.885627] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3018.886151] RIP: 0033:0x7fdb8bc19b19 [ 3018.886535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3018.888378] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3018.889147] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3018.889863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3018.890631] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3018.891371] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3018.892087] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3018.892959] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 3018.906852] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xd58, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x14) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 23:40:49 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x154) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000080)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)="86a791a7ed8a55db2ebd67b12ec0e5d93fb2b22d8ebf053b3192317fa47881d42769fb0e2c3958347837a0d031ad7de21b941442207777491059f7a932ba9f337897f7d51552b979adcf87b6810fc8afa1d183614dfd51e31ed0eec02b740099104b9b9e9044081a59c289d390b9df9a5c79db516a57cbfdd132f7c333d8a6e25a7c6e4c76e56d02e76a0d7a37aa037671e973409c656721231818a8636c03668e4dc446b677c4acf98061a635", 0xad}, {&(0x7f0000000180)="60cdd3eb1db1e2b646e45c12dbd13873f5e66b6445f0e30eac6d467010dc115a42beedec87f125a9e69053e94bb7acf95fd465dae4693d30093e091b9fb8e609e97a017a163b95ff59ebf520093db178754fe18094eee16e9deb6fc618fe5bffdfa64135c3b8ddfcc9685d24ea75c30f7256df4f108d5656aa1bc9f27fa45ed0600dc0a3f2b1c63c20fd2b5bbb1fb3b8c0720eebbb7e0d72015ad4b90664ad5a83e8d4af3bbffdd423b0f683ca903491", 0xb0}, {&(0x7f0000000240)="374ee32bc982a0c519ce2ed4f8624a07c0510396e3ac3dac4074c50357185a03647778d3056af288fc3cd41345527f109bf925d2a788864a7af9b9e7f08348595172f3786ee88520f500e4a6926275e777c4469bfa6ba73b685268bfaf829e52c477a1b63122f12313ffb7d106cf303244087c0bdf6eddc0d4f6c45042653f80a62082f5dcd87f6a30c35e63d4f0962105b8ce356ab428d9735b58c9a88cee570d9b8dbe5a23118b0b191ef280523e8c20", 0xb1}, {&(0x7f0000000300)="15697d28b5aa915b93a218b56e90526a19ef526661cb31d211c472515bdf6c342e10cfe8c38fe4fa08eb17920fa6e381a5e01045fa114957eb0267bdda506ff527a4d6b88a5a471233021490c13a909a2c918b622544b06974441c9440f7541e5c5bb31f69925002fb615e5934f9a9370e1a4c0eddedf2a81eeb2d9c23dceec2e35f629cbab7db088cdc495525edb39f8076103dcc8ac16889c207aaa74ec3d6963fd6464b69017d", 0xa8}, {&(0x7f00000003c0)="1478bccc60f4bdf47acb2132021b285ef0bc1c439f87631ab457eca6992b833d7ca82a757ef2497c58f87ff93bc12bd87f1c0c87a418f5f027cd9cc6c5f221b4ddd87c7c7a2eeb15cf0ed155092a7660da74bf7d44053e7f2366dd5192e767bea3d211618d5483b0ed3992bbeb9e518f053d5fb5fb50a9433bb219782a32e5294d36c41c9d3e6c1aea877c75ede382ec91a84b3ce2db91d5314e38c2c1cc3ae3e852c931de9212149cd088b646f1d9444a5379178d6494eeb04c9b07c0dcca236ba4ce4daac97825a59e0ef121630921024be5c0e5580c46a8cafda0aa6890f91958a2ea60c43e341ca21f64368b75b0f990e4eb87c3316d94085cbe53d2", 0xfe}, {&(0x7f00000004c0)="f98a7a8d593604f015793dfae002e5bf657c53af0d326934ee9124891b762cc36735ef490a7aec16f12bffebecab93d875cefd1d077993f651b167eabf0a", 0x3e}, {&(0x7f0000000500)="0f84f68c9e15e528b243582768092ca11f1776e6d6267d217790048bc8c824521675af66f76293231dae5861189a03ac4f1c40fb324384e3fee3fd50ded13525bf5592d3d01473fe117c4c1ac9072e0605fa875167468d46df461d7ad2daf92c36099606ec1ce14a6d2b43140bc70465d0714747103bc94662e449e9098fb2daa6e4307db6fb507b7d6e18844f1c7f4b11027cbb9860e8348308f90c7a9b30a92f6766c5695141b913548bacd04ed469c89711059af6be77e9319738a0057233217f17194e9393d9b8c53297ee83b3364da9d6e90c556e82657c395b3f5c19b80eb362ca5a414722e03a43744813509f55f8", 0xf2}], 0x7, &(0x7f0000000680)=[@rthdr={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x2, 0x0, [@mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x4, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0xc0}, 0x4000001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x40, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}], [{@appraise}, {@measure}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '$+{})-:\\\\#]&*\''}}, {@uid_eq={'uid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@seclabel}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:40:49 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000500000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x8256) 23:40:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:40:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xb240}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3032.885639] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3032.897378] FAULT_INJECTION: forcing a failure. [ 3032.897378] name failslab, interval 1, probability 0, space 0, times 0 [ 3032.898500] CPU: 0 PID: 18111 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3032.899123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3032.899938] Call Trace: [ 3032.900189] dump_stack+0x107/0x167 [ 3032.900509] should_fail.cold+0x5/0xa [ 3032.900847] ? create_object.isra.0+0x3a/0xa20 [ 3032.901254] should_failslab+0x5/0x20 [ 3032.901592] kmem_cache_alloc+0x5b/0x310 [ 3032.901922] ? __kmalloc+0x16e/0x390 [ 3032.902245] create_object.isra.0+0x3a/0xa20 [ 3032.902618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3032.903072] __kmalloc+0x16e/0x390 [ 3032.903377] ? trace_hardirqs_on+0x5b/0x180 [ 3032.903767] trace_probe_init+0x6a/0x4e0 [ 3032.904136] alloc_trace_uprobe+0x63/0x2b0 [ 3032.904514] create_local_trace_uprobe+0x101/0x4e0 [ 3032.904924] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3032.905344] ? memdup_user+0x7c/0xd0 [ 3032.905677] perf_uprobe_init+0x136/0x210 [ 3032.906033] perf_uprobe_event_init+0xff/0x1d0 [ 3032.906423] perf_try_init_event+0x130/0x570 [ 3032.906813] perf_event_alloc.part.0+0xd96/0x2b70 [ 3032.907252] __do_sys_perf_event_open+0x579/0x2e60 [ 3032.907685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3032.908111] ? perf_event_set_output+0x5b0/0x5b0 [ 3032.908523] ? wait_for_completion_io+0x270/0x270 [ 3032.908956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3032.909406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3032.909852] do_syscall_64+0x33/0x40 [ 3032.910170] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3032.910620] RIP: 0033:0x7fdb8bc19b19 [ 3032.910954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3032.912517] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3032.913177] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3032.913784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3032.914394] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3032.915003] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3032.915630] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:40:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3032.917874] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xf1ff) 23:40:49 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) 23:40:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3033.052379] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:40:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xb800}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:40:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:40:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(r0, &(0x7f0000000400)='./file0\x00', 0x80000, 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/162, 0xa2}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x2000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x8000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r3, 0x300000000000000) 23:40:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3033.138353] FAULT_INJECTION: forcing a failure. [ 3033.138353] name failslab, interval 1, probability 0, space 0, times 0 [ 3033.139418] CPU: 0 PID: 18205 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3033.140005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3033.140725] Call Trace: [ 3033.140964] dump_stack+0x107/0x167 [ 3033.141279] should_fail.cold+0x5/0xa [ 3033.141620] ? trace_probe_init+0x6a/0x4e0 [ 3033.141990] should_failslab+0x5/0x20 [ 3033.142298] __kmalloc+0x72/0x390 [ 3033.142596] ? trace_hardirqs_on+0x5b/0x180 [ 3033.142956] trace_probe_init+0x6a/0x4e0 [ 3033.143323] alloc_trace_uprobe+0x63/0x2b0 [ 3033.143670] create_local_trace_uprobe+0x101/0x4e0 [ 3033.144103] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3033.144477] ? memdup_user+0x7c/0xd0 [ 3033.144810] perf_uprobe_init+0x136/0x210 [ 3033.145164] perf_uprobe_event_init+0xff/0x1d0 [ 3033.145554] perf_try_init_event+0x130/0x570 [ 3033.145911] perf_event_alloc.part.0+0xd96/0x2b70 [ 3033.146331] __do_sys_perf_event_open+0x579/0x2e60 [ 3033.146744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3033.147170] ? perf_event_set_output+0x5b0/0x5b0 [ 3033.147588] ? wait_for_completion_io+0x270/0x270 [ 3033.148027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3033.148451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3033.148897] do_syscall_64+0x33/0x40 [ 3033.149203] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3033.149646] RIP: 0033:0x7fdb8bc19b19 [ 3033.149958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3033.151550] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3033.152201] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3033.152828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3033.153443] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3033.154055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3033.154667] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3033.155359] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 3033.316456] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:04 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)='1', 0x1}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r2, 0x824982e72caa5b1d}, 0x14}}, 0x0) 23:41:04 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000600000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:04 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:04 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x420140, 0x0) r2 = signalfd(r1, &(0x7f0000000180)={[0x1]}, 0x8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xff01) 23:41:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:41:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:41:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xbdc0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3048.554442] FAULT_INJECTION: forcing a failure. [ 3048.554442] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.556450] CPU: 0 PID: 18335 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3048.557641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.558969] Call Trace: [ 3048.559425] dump_stack+0x107/0x167 [ 3048.560022] should_fail.cold+0x5/0xa [ 3048.560641] ? create_object.isra.0+0x3a/0xa20 [ 3048.561385] should_failslab+0x5/0x20 [ 3048.562002] kmem_cache_alloc+0x5b/0x310 [ 3048.562663] ? lock_downgrade+0x6d0/0x6d0 [ 3048.563359] create_object.isra.0+0x3a/0xa20 [ 3048.564076] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3048.564903] __kmalloc_track_caller+0x177/0x370 [ 3048.565652] ? trace_probe_init+0x227/0x4e0 [ 3048.566363] kstrdup+0x36/0x70 [ 3048.566893] trace_probe_init+0x227/0x4e0 [ 3048.567586] alloc_trace_uprobe+0x63/0x2b0 [ 3048.568274] create_local_trace_uprobe+0x101/0x4e0 [ 3048.569073] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3048.569819] ? memdup_user+0x7c/0xd0 [ 3048.570441] perf_uprobe_init+0x136/0x210 [ 3048.571135] perf_uprobe_event_init+0xff/0x1d0 [ 3048.571879] perf_try_init_event+0x130/0x570 [ 3048.572593] perf_event_alloc.part.0+0xd96/0x2b70 [ 3048.573394] __do_sys_perf_event_open+0x579/0x2e60 [ 3048.574204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.574986] ? perf_event_set_output+0x5b0/0x5b0 [ 3048.575759] ? wait_for_completion_io+0x270/0x270 [ 3048.576571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.577417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.578258] do_syscall_64+0x33/0x40 [ 3048.578863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3048.579702] RIP: 0033:0x7fdb8bc19b19 [ 3048.580308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.583267] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3048.584498] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3048.585649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3048.586798] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.587954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3048.589104] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3048.593436] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:05 executing program 6: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x18) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:41:05 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xc380}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xff0f) [ 3048.777704] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3048.850965] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:20 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 23:41:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xfff1) 23:41:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:41:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:20 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, &(0x7f0000000000)=0xcf, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xc940}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3064.343947] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3064.358758] FAULT_INJECTION: forcing a failure. [ 3064.358758] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.360847] CPU: 0 PID: 18476 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3064.361961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.363309] Call Trace: [ 3064.363745] dump_stack+0x107/0x167 [ 3064.364338] should_fail.cold+0x5/0xa [ 3064.364969] should_failslab+0x5/0x20 [ 3064.365589] __kmalloc_track_caller+0x79/0x370 [ 3064.366412] ? trace_probe_init+0x284/0x4e0 [ 3064.367126] kstrdup+0x36/0x70 [ 3064.367664] trace_probe_init+0x284/0x4e0 [ 3064.368347] alloc_trace_uprobe+0x63/0x2b0 [ 3064.369036] create_local_trace_uprobe+0x101/0x4e0 [ 3064.369831] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3064.370577] ? memdup_user+0x7c/0xd0 [ 3064.371191] perf_uprobe_init+0x136/0x210 [ 3064.371879] perf_uprobe_event_init+0xff/0x1d0 [ 3064.372623] perf_try_init_event+0x130/0x570 [ 3064.373343] perf_event_alloc.part.0+0xd96/0x2b70 [ 3064.374139] __do_sys_perf_event_open+0x579/0x2e60 [ 3064.374943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.375738] ? perf_event_set_output+0x5b0/0x5b0 [ 3064.376528] ? wait_for_completion_io+0x270/0x270 [ 3064.377339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.378184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.379043] do_syscall_64+0x33/0x40 [ 3064.379662] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3064.380489] RIP: 0033:0x7fdb8bc19b19 [ 3064.381093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.384071] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3064.385312] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3064.386457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3064.387635] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.388813] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3064.389961] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3064.391540] trace_uprobe: Failed to allocate trace_uprobe.(-12) 23:41:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xcf00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x26}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000040)=""/192, 0xc0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000003d40)=[{&(0x7f0000002d00)='m', 0x1, 0x4}], 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 23:41:34 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000a00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1517f) 23:41:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:41:34 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3078.427654] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3078.453948] FAULT_INJECTION: forcing a failure. [ 3078.453948] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.455308] CPU: 0 PID: 18616 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3078.456218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.457172] Call Trace: [ 3078.457486] dump_stack+0x107/0x167 [ 3078.457909] should_fail.cold+0x5/0xa [ 3078.458359] ? create_object.isra.0+0x3a/0xa20 [ 3078.458949] should_failslab+0x5/0x20 [ 3078.459401] kmem_cache_alloc+0x5b/0x310 [ 3078.459939] create_object.isra.0+0x3a/0xa20 [ 3078.460457] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.461103] __kmalloc_track_caller+0x177/0x370 [ 3078.461639] ? trace_probe_init+0x284/0x4e0 [ 3078.462194] kstrdup+0x36/0x70 [ 3078.462569] trace_probe_init+0x284/0x4e0 [ 3078.463108] alloc_trace_uprobe+0x63/0x2b0 [ 3078.463616] create_local_trace_uprobe+0x101/0x4e0 [ 3078.464247] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3078.464784] ? memdup_user+0x7c/0xd0 [ 3078.465261] perf_uprobe_init+0x136/0x210 [ 3078.465746] perf_uprobe_event_init+0xff/0x1d0 [ 3078.466322] perf_try_init_event+0x130/0x570 [ 3078.466850] perf_event_alloc.part.0+0xd96/0x2b70 [ 3078.467493] __do_sys_perf_event_open+0x579/0x2e60 [ 3078.468081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.468692] ? perf_event_set_output+0x5b0/0x5b0 [ 3078.469244] ? wait_for_completion_io+0x270/0x270 [ 3078.469892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3078.470501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.471086] do_syscall_64+0x33/0x40 [ 3078.471540] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3078.472144] RIP: 0033:0x7fdb8bc19b19 [ 3078.472583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.474683] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3078.475568] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3078.476388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3078.477200] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.478009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3078.478818] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:41:34 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x40000) 23:41:35 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000030d00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:35 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000655a0038000000000000000000000000002000"/88], 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1375, 0xfffffffffffffff8}, 0x8810, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = getpgrp(0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/215, 0xd7}], 0x6) pidfd_open(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x81, 0x6, 0x1, 0x40, 0x0, 0x8, 0x40001, 0x128ec5c4da3c6b62, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x10, 0x8001, 0x6, 0x5, 0x8001, 0x80, 0x5, 0x0, 0x42, 0x0, 0x4}, r1, 0x0, r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r4, &(0x7f0000000140)="ee", 0x1}]) lseek(r3, 0x0, 0x4) open$dir(&(0x7f0000000000)='./file1/file0\x00', 0x400, 0x2) 23:41:35 executing program 6: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x208102, 0x8c) dup2(r1, r2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e55c00000cea0f202de04f9416b3b840310654d56814bc48d651f76bcdcacdfd37ba65a1a843b6088ca6b4c49cddd0fe67b42df6c19771252a1af8aab026963d2532ac4c98730af7f02e9f92d9585cc3136019b5f68150c3990c099f83f9c7098f631b9654277315ce15964468090a845f9d9c5bfea21f615e2b79492d4dd9022458d9480df5e547", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf251a00000008009a000000000007002100616100000400cc0008009a00010000000400cc0008009a005a53a965050092004000000008009a009c83ad004d3b1de6620000000500920004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x28000011}, 0x40001) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) write(r3, &(0x7f00000002c0)="6ae101a6c923b1f867c4ebd9342df45f8396ebc29c4d546d2e459cb712c0d34bf4f3715127681c842c179ac69ee11943c1dda0fff0d6d57615d08761389c2a9d12fdae21d6962373ab08f272", 0x4c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xd4c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3078.673664] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3078.681874] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3078.685889] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 19) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:41:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:41:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x50800) [ 3078.794298] FAULT_INJECTION: forcing a failure. [ 3078.794298] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.795303] CPU: 1 PID: 18758 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3078.795866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.796533] Call Trace: [ 3078.796758] dump_stack+0x107/0x167 [ 3078.797063] should_fail.cold+0x5/0xa [ 3078.797387] should_failslab+0x5/0x20 [ 3078.797703] __kmalloc_track_caller+0x79/0x370 [ 3078.798077] ? create_local_trace_uprobe+0x1af/0x4e0 [ 3078.798501] kstrdup+0x36/0x70 [ 3078.798762] create_local_trace_uprobe+0x1af/0x4e0 [ 3078.799164] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3078.799550] ? memdup_user+0x7c/0xd0 [ 3078.799877] perf_uprobe_init+0x136/0x210 [ 3078.800233] perf_uprobe_event_init+0xff/0x1d0 [ 3078.800611] perf_try_init_event+0x130/0x570 [ 3078.800973] perf_event_alloc.part.0+0xd96/0x2b70 [ 3078.801384] __do_sys_perf_event_open+0x579/0x2e60 [ 3078.801801] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.802200] ? perf_event_set_output+0x5b0/0x5b0 [ 3078.802588] ? wait_for_completion_io+0x270/0x270 [ 3078.803006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3078.803452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.803884] do_syscall_64+0x33/0x40 [ 3078.804192] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3078.804773] RIP: 0033:0x7fdb8bc19b19 [ 3078.805076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.806562] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3078.807177] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3078.807762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3078.808338] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.808908] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3078.809486] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3078.823907] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:35 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x2000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x3ff, 0x3, 0xb3, 0x10001}, {0x6, 0x4d, 0x3f, 0x2}, {0x40, 0x91, 0xff}, {0xfffb, 0x0, 0x7}, {0x41, 0x8, 0x8, 0x3}, {0x8, 0x78, 0x7f, 0x7}, {0x200, 0x2, 0x4, 0x4}, {0xe2f2, 0x9, 0x10, 0x7fffffff}]}, 0x10) accept(r0, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) bind$packet(r0, &(0x7f0000000140)={0x11, 0x18, 0x0, 0x1, 0xfb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:35 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000e00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3078.847868] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 20) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3078.913541] FAULT_INJECTION: forcing a failure. [ 3078.913541] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.914926] CPU: 0 PID: 18820 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3078.915766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.916760] Call Trace: [ 3078.917096] dump_stack+0x107/0x167 [ 3078.917551] should_fail.cold+0x5/0xa [ 3078.918025] ? create_object.isra.0+0x3a/0xa20 [ 3078.918584] should_failslab+0x5/0x20 [ 3078.919053] kmem_cache_alloc+0x5b/0x310 [ 3078.919573] create_object.isra.0+0x3a/0xa20 [ 3078.920112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.920733] __kmalloc_track_caller+0x177/0x370 [ 3078.921308] ? create_local_trace_uprobe+0x1af/0x4e0 [ 3078.921938] kstrdup+0x36/0x70 [ 3078.922337] create_local_trace_uprobe+0x1af/0x4e0 [ 3078.922936] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3078.923517] ? memdup_user+0x7c/0xd0 [ 3078.923986] perf_uprobe_init+0x136/0x210 [ 3078.924505] perf_uprobe_event_init+0xff/0x1d0 [ 3078.925065] perf_try_init_event+0x130/0x570 [ 3078.925637] perf_event_alloc.part.0+0xd96/0x2b70 [ 3078.926242] __do_sys_perf_event_open+0x579/0x2e60 [ 3078.926894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.927509] ? perf_event_set_output+0x5b0/0x5b0 [ 3078.928131] ? wait_for_completion_io+0x270/0x270 [ 3078.928773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3078.929411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.930050] do_syscall_64+0x33/0x40 [ 3078.930506] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3078.931127] RIP: 0033:0x7fdb8bc19b19 [ 3078.931622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.933809] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3078.934792] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3078.935712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3078.936619] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.937533] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3078.938442] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:41:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xda80}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:41:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3079.036740] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3079.156194] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:41:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xe040}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) openat(r2, 0x0, 0x0, 0x12) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x46000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/121, 0x79}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/204, 0xcc}], 0x3, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) migrate_pages(0x0, 0x4, &(0x7f0000000200), &(0x7f00000000c0)=0x2) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001e00)={0x15e8, 0x10, 0x100, 0x70bd2a, 0x25dfdbfb, {0x20}, [@typed={0x5, 0x70, 0x0, 0x0, @str='\x00'}, @generic, @generic="07595b065cfc1f1d72ca5931c589eb83e6d0edc851de62e599f734e0deba9f843376daa5eb7845528d381c0cf0adf2a16654b1debf0df961006bfe78c6d8bb1599bba2927f5c85c9808a91e7cc1d34e07e70eee3ee6e3f9d194f2250c81141524734511bd6a6c817", @generic="23b75b489813b54c27628c6b5fab2dff501e0de2d61bbc3855a413495ff4562c17b17e8c64f1fa1dd8e321cf6ae459a23f229822", @generic="a5c2c73b882b885f0240f8b930b9eb6f7f425f9e996f1994f1b122ea766b6d1352442a2f00bbb9753252a511352439a4559808d7c4fd032c36e6542e5b3d8ae82ec7771a1cca91664fd60b49c66379ba49af85a1e8fc3fd9227b03b66cbee7333e7e647d1f47782b0d1fb954dd0c1d2ac0628c35d4c3d20d2bd3b7df7919f2a1af53dffaedf83d458099dc918c9ee29f3b552fa0cbcd6931c4fb4646d326da6cc56935b76a80f7853e93698f968b091641a8b56c986c4fd79597b25bc5e1f3bf2cf341eb84a4a72df2ef2f021effb56d83b0f10e8771e9a63863d583a1790aae5e64afd3c47273a89c1db0", @generic="6333f6ffee751324fe04f8a98423907c96446f47d927e875358a1644d14ea1d6ce432eaa576526c4fea1ccd4820513089f91c1dd9dc7c410db4e48c886d9ed925734e09f701c9a01487dbdc3365bd1f1638001629f9522be5a43c1774f61ca138a261d3f182f89ade9bff739dfd6901457bc7edac3001f9cd83b75a6f9eaf3888f851d3b3606a0943a7755d260c6d3a27ffeb627581494590c1ed4080ecd87b1369f763fc56f9f321c92bde875207bd797445f7d0a17501904965cbb92b1003d4cd2e484add0659358d48c443781f79ee5641c9da4d5890a37a9095a209edeabb2e1877dd1a3d11d9bdb0dd1a9ce8651758f", @nested={0x1c, 0x76, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8f, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0xb6}]}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@local}, @nested={0x1233, 0x26, 0x0, 0x1, [@generic="9e67d569af084e908a85b3ba7c8e5874956e41c3bfc3eb8058e4846eff0718fc83e40f711523ff30e9e47ba05b110debffeff20f907c84d7ffdd795c703831c9ec97907056609ce1ca486b36c25a0a6cc9fae496eb0d47d497befe1d11978643042936690b12996567ed5ae23a31996c68c8323b84f491e1f3e41ff31490f327116071ff6fe8718b514802cc18ddbe65f34699158d14c9a6c7a9d278985c17637cc03a99b7d04d61346778bf9c0e621b74ea62366d69f1b0e5430ff503ca466e01f96ee5efff749326c2d5db282d4b1b058af28df75c55eeae7b", @typed={0x6, 0x42, 0x0, 0x0, @str='!\x00'}, @generic="2fb7470ae0741156578ecf5013d891664d4a969b07d144a8d61c4f68f62e7b9b18daf84ea37b5b133c459078fac6df7a92501e1991d23f56075ac7320b6de335922e415432b147e3662dda404aa16559b3d9c082f50618300d45b49da53d6d4b86799172717e02ae957c803b", @generic="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", @generic="20e09b1cbfe237417bafebe2f2865a26b583a3cafb5a7a54e4e207fecfa64e096e1fc3c3af65c43916ee8ce4fe0df0549cf8a9a0b575f71059a8b82ad032fbaaafc2f82e04f57d6492eb4bed5aa8e02956dddd497a15df806ff47786", @generic="e85c578f4d2bbb90e4dfaa2b5efa84e286d8e1d03466fa1fb01310552a1d9b4e232ed7957ed88d2ac2704761f087b10f8719e52461f62aef756bd3529c2ba029d1df80c7f3170cfe21fc3979813ad1361c96dfc42f774c9cffc01675684fbdf96ae59da04a8d831b71cf69fb5b4b3d1bcc20e5c53511383facefe4c3f30f632b73e39990bb"]}, @generic="83fc530d022b7abf38c64aaebfd104aa0b23be7437b7239acb8035c0350abac555dc9736a4429e35cb5ef2e662827570035c1fae077e7ad5f32b65cf2f877d75e202b857e9246ecad7686ec0eed721a01cdc05327c76bf49f02f413ec508ae0802111f5b6c7ad24bba6a762d0c10eb17636fee130923b78cccb268c9bfbdc27c279a9f34ad279cfcd55dc15474766bcdab533f825188efc3902bf59afc243817d22f826ea1a891b773324e3d46b96ae21bc98ceb14720c76ad95fbe4cc239a8d7e28ddef9635fd4c7c873252cda81eefbfa6dd632b92e6ef6d0b2916bc56178078b2fcd82da1fe3178a74e831e"]}, 0x15e8}, 0x1, 0x0, 0x0, 0x1}, 0x40) dup2(r3, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x15100, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) 23:41:49 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:41:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 21) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:41:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x5080c) 23:41:49 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000004000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:41:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950a000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3093.093447] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3093.097106] FAULT_INJECTION: forcing a failure. [ 3093.097106] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.097119] CPU: 1 PID: 18871 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3093.097125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.097129] Call Trace: [ 3093.097144] dump_stack+0x107/0x167 [ 3093.097156] should_fail.cold+0x5/0xa [ 3093.097170] ? traceprobe_set_print_fmt+0x5a/0xd0 [ 3093.097183] should_failslab+0x5/0x20 [ 3093.097193] __kmalloc+0x72/0x390 [ 3093.097203] ? __kmalloc_track_caller+0x2c6/0x370 [ 3093.097217] traceprobe_set_print_fmt+0x5a/0xd0 [ 3093.097229] create_local_trace_uprobe+0x309/0x4e0 [ 3093.097240] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3093.097254] ? memdup_user+0x7c/0xd0 [ 3093.097269] perf_uprobe_init+0x136/0x210 [ 3093.097288] perf_uprobe_event_init+0xff/0x1d0 [ 3093.097300] perf_try_init_event+0x130/0x570 [ 3093.097313] perf_event_alloc.part.0+0xd96/0x2b70 [ 3093.097331] __do_sys_perf_event_open+0x579/0x2e60 [ 3093.097348] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3093.097360] ? perf_event_set_output+0x5b0/0x5b0 [ 3093.097370] ? wait_for_completion_io+0x270/0x270 [ 3093.097397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.097407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.097421] do_syscall_64+0x33/0x40 [ 3093.097431] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3093.097438] RIP: 0033:0x7fdb8bc19b19 [ 3093.097449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:41:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 22) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3093.097454] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3093.097467] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3093.097473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3093.097479] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.097485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3093.097492] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3093.272951] FAULT_INJECTION: forcing a failure. [ 3093.272951] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.274243] CPU: 0 PID: 18979 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3093.274995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.275888] Call Trace: [ 3093.276190] dump_stack+0x107/0x167 [ 3093.276595] should_fail.cold+0x5/0xa [ 3093.277011] ? create_object.isra.0+0x3a/0xa20 [ 3093.277510] should_failslab+0x5/0x20 [ 3093.277925] kmem_cache_alloc+0x5b/0x310 [ 3093.278378] create_object.isra.0+0x3a/0xa20 [ 3093.278850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.279398] __kmalloc+0x16e/0x390 [ 3093.279794] ? __kmalloc_track_caller+0x2c6/0x370 [ 3093.280323] traceprobe_set_print_fmt+0x5a/0xd0 [ 3093.280828] create_local_trace_uprobe+0x309/0x4e0 [ 3093.281264] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 3093.281710] ? memdup_user+0x7c/0xd0 [ 3093.282067] perf_uprobe_init+0x136/0x210 [ 3093.282423] perf_uprobe_event_init+0xff/0x1d0 [ 3093.282830] perf_try_init_event+0x130/0x570 [ 3093.283198] perf_event_alloc.part.0+0xd96/0x2b70 [ 3093.283652] __do_sys_perf_event_open+0x579/0x2e60 [ 3093.284089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3093.284507] ? perf_event_set_output+0x5b0/0x5b0 [ 3093.284926] ? wait_for_completion_io+0x270/0x270 [ 3093.285454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.286023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.286588] do_syscall_64+0x33/0x40 [ 3093.286989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3093.287534] RIP: 0033:0x7fdb8bc19b19 [ 3093.287948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.289869] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3093.290684] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3093.291450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3093.292238] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.292999] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3093.293770] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3093.299911] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3093.307197] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3093.310177] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x400) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080)=0x3, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 23:42:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 23) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000, 0x40}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:03 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000006000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) writev(r0, &(0x7f0000001580)=[{&(0x7f00000011c0)="95de3d2c547ee69d2950fcd54f1a6eafd5cb3af1f9f841a97034be2440a0410fe33f0bfbc019f930883a5eec0cb9225de72ebf9879f6f0f15cd999b0edb3823f9b5c19fddd39eba1e9eb2e744d5b662583fdbb997488312e58452f5eecbe79b6da5dcc03942b56b0faa6030e7d7d779083c8f20229a742b555e772a13a4cbe0346dab700ba585343c54caf7a1bd8c829ed9b67261ded7140712307ab2270c063eab9a43b957d6c446d3e36bff9615b2d4fc27df3c65ecdccd00d281bcf790ae15767c59b48a9c5c14c54cc9af9d5e1684185e23b", 0xd4}, {&(0x7f00000012c0)="993900", 0x3}, {&(0x7f0000001300)="9beea7e86378d2c50f192afbd6b044a1ab8c206650e04b4af81500c580993d1b103b8f23b9c38dae0366c4e6fc42ea2371f119f297ebbac2820048d068e48ab09e8505e5f218c3311063df47306f791dd6d5b56886944cde85744acbfee99e723f96602ee49f6a2a5c4d8015abf90968296e12eb4e5ef17836c821482167b92a508bd3181006d7b9becf11dd424b3a06bf57a969d7bbfaf15e10d47d17bed23abecf4e371609040ee65b2eb130a7809f801a1ba078679568469fa29a5fc06f8a8f2575728a7148dc025f642e05381744bd19db0c8b2902b2c5bba01161adc19c81cb5f", 0xe3}, {&(0x7f0000001400)="29e3cb22ad0a147d800824e653bbaca609820e7f6bd42a5382efe191c4faf4a8e3af37c0ffe1d0b783c6a0c9880d5a4e29e4b02af3aa3ba3729dad17029eaac861d704e9adca42ed21", 0x49}, {&(0x7f0000001480)="68ea7780caf23e5ff57cb19c5f4e5248e9bd45093f84b5abf5a208bb966f1a5106d126ae6809e2af323bf7ddc8f6cefb6aee4b14575851187870159199dd5ed640771ac32715d06dd8a739f0878f37fd03", 0x51}, {&(0x7f0000001500)="b26f5ed4f17245f7b6d499ff609f520200cffb673f459b668cdb47ce3ae875d37c13eb8e980edc04ca8b5c1cb77cf6af83fbfed8b7074be0953322bfb577b97544cf53e7898ec8d30ecbf0b5a8722d24e6d00d30b7a95e6325d5be73f338d88ebd2e0875b647156f2a3f14114e275b2472d0258078957cb6b7cc", 0x7a}], 0x6) r1 = socket$inet(0x2, 0xa, 0x300) syz_emit_ethernet(0x1012, &(0x7f0000004880)=ANY=[], 0x0) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000380000000000000000000000000020000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000e1b6e471f2ed931410999ba91aa8796fb15e772f3e33ccf36e8bdd8769033bd286abf004c3e03e436fff0f0000c6d5a512deffb555e8bce291b22300740a6dfb4896c6d021b7cb72bc2e9a65ffeab111ea1ad9803fccc1590c6c757e4378818cbaf097ca7d6c876193402d5b54c606648f5b8eb8caa01d642fd6f8a3527254caf228f4593752b1e400000000000000000000db6652ada918edf9f93aa772c41c9d8fc0a5d1babbf35ebd9ba990a9d0b012c873b700ab4a494b96342fbb896ea0803791874ee5f5595d9e315dc2396a4af97478230daa09eb3b7e7382ee62bbce965e506d"], 0xe0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) write$tun(r2, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@llc_tr={0x11, {@snap={0x1, 0x0, "2cba", "53b481", 0x888e, "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"}}}}}}, 0x101b) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001040)=0x1) 23:42:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xe600}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x50810) [ 3107.073307] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3107.085699] FAULT_INJECTION: forcing a failure. [ 3107.085699] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.086677] CPU: 1 PID: 18996 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3107.087206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.087862] Call Trace: [ 3107.088088] dump_stack+0x107/0x167 [ 3107.088397] should_fail.cold+0x5/0xa [ 3107.088721] ? create_object.isra.0+0x3a/0xa20 [ 3107.089097] should_failslab+0x5/0x20 [ 3107.089517] kmem_cache_alloc+0x5b/0x310 [ 3107.089857] create_object.isra.0+0x3a/0xa20 [ 3107.090315] kmemleak_alloc_percpu+0xa0/0x100 [ 3107.090815] pcpu_alloc+0x4e2/0x1240 [ 3107.091194] perf_trace_event_init+0x376/0x9c0 [ 3107.091570] ? memdup_user+0x7c/0xd0 [ 3107.092033] perf_uprobe_init+0x173/0x210 [ 3107.092403] perf_uprobe_event_init+0xff/0x1d0 [ 3107.092902] perf_try_init_event+0x130/0x570 [ 3107.093321] perf_event_alloc.part.0+0xd96/0x2b70 [ 3107.093854] __do_sys_perf_event_open+0x579/0x2e60 [ 3107.094412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3107.094829] ? perf_event_set_output+0x5b0/0x5b0 [ 3107.095217] ? wait_for_completion_io+0x270/0x270 [ 3107.095662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.096101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.096540] do_syscall_64+0x33/0x40 [ 3107.096843] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3107.097280] RIP: 0033:0x7fdb8bc19b19 [ 3107.097586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.099185] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3107.099811] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3107.100389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3107.100965] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3107.101544] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3107.102121] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:42:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:03 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000006300)={0x3, &(0x7f00000062c0)=[{0x401, 0x4, 0x2, 0x3}, {0x100, 0x4, 0x1, 0x81}, {0x200, 0x1, 0x7f, 0x9}]}, 0x10) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x4, &(0x7f00000002c0)=""/215, 0xd7}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/245, 0xf5}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6}, 0x8}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, &(0x7f00000037c0)=""/167, 0xa7}}, {{&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000003900)=""/41, 0x29}, {&(0x7f0000003940)=""/233, 0xe9}, {&(0x7f0000003a40)=""/241, 0xf1}, {&(0x7f0000003b40)=""/3, 0x3}, {&(0x7f0000003b80)=""/75, 0x4b}, {&(0x7f0000003c00)=""/112, 0x70}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/73, 0x49}, {&(0x7f0000004d00)=""/158, 0x9e}, {&(0x7f0000004dc0)=""/4096, 0x1000}], 0xa}, 0x9}, {{&(0x7f0000005e80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005f00)=""/175, 0xaf}], 0x1, &(0x7f0000006000)=""/220, 0xdc}, 0x10001}], 0x5, 0x40, &(0x7f0000006280)={r1, r2+10000000}) socket$packet(0x11, 0x3, 0x300) [ 3107.172588] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x80000) 23:42:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 24) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xebc0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3107.240397] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3107.348895] FAULT_INJECTION: forcing a failure. [ 3107.348895] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.349874] CPU: 1 PID: 19117 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3107.350437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.351110] Call Trace: [ 3107.351334] dump_stack+0x107/0x167 [ 3107.351639] should_fail.cold+0x5/0xa [ 3107.351966] ? create_object.isra.0+0x3a/0xa20 [ 3107.352347] should_failslab+0x5/0x20 [ 3107.352664] kmem_cache_alloc+0x5b/0x310 [ 3107.352999] ? mark_held_locks+0x9e/0xe0 [ 3107.353335] create_object.isra.0+0x3a/0xa20 [ 3107.353704] kmemleak_alloc_percpu+0xa0/0x100 [ 3107.354079] pcpu_alloc+0x4e2/0x1240 [ 3107.354410] perf_trace_event_init+0x376/0x9c0 [ 3107.354785] ? memdup_user+0x7c/0xd0 [ 3107.355100] perf_uprobe_init+0x173/0x210 [ 3107.355457] perf_uprobe_event_init+0xff/0x1d0 [ 3107.355841] perf_try_init_event+0x130/0x570 [ 3107.356208] perf_event_alloc.part.0+0xd96/0x2b70 [ 3107.356614] __do_sys_perf_event_open+0x579/0x2e60 [ 3107.357025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3107.357422] ? perf_event_set_output+0x5b0/0x5b0 [ 3107.357812] ? wait_for_completion_io+0x270/0x270 [ 3107.358235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.358663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.359095] do_syscall_64+0x33/0x40 [ 3107.359401] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3107.359828] RIP: 0033:0x7fdb8bc19b19 [ 3107.360137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.361640] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3107.362296] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3107.362893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3107.363467] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3107.364054] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3107.364637] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3107.393540] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xf180}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 25) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/1828], 0x724}}, 0x0) r1 = syz_io_uring_setup(0x20e6, &(0x7f0000000080)={0x0, 0x4730, 0x2, 0xffffffff, 0xffffffff, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000012c0), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000012) pwritev2(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)='t', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x340, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_a, @random="c9f463ed293c"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x2f6, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_b, @broadcast, {0x5}}, {0x6, 0x0, 0x3, 0x0, 0x6}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x20}, @random="60920546b5f9", @device_a, @initial, {0x8, 0x3}}, {0x2, 0x0, 0x1, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_a, 0x3e, "8de7c2db33aa9cdf4043239d4a76ac9c686e433251309faa93f2c5886551adf554b166b8a8d53e30960bfea9d34a0f2eaef6bdc3540c1f59332c25789e4a"}, {@device_b, @device_b, 0x19, "dc6b1c0efb8a0ec42921352bfd1e7822708689f069f8275bba"}, {@device_a, @device_a, 0x5d, "108559baf2c3bca263fb3d669bfca487a918dfa2f67fd5c9fd567b6caecc7c8fbf48bcdf29c5380463c16a7a27c47c7fc0e76eeea9dc432e3d9e4688ce70d7956c5e065b54f5d928e7cfd12b973ed7214f5b88d033736589bcba205c00"}, {@broadcast, @device_b, 0xf5, "abe8fa47e899ad970f2b943bfb4701346fc5bf562fefb41e45cdf595dba49798c9f5fb2224e87b64633a3c85a53e178779ab48d2f8c456a158e7d2927060937c2e6f2fa23a3f7d72e51df1ff80225e1de50ae200e86a5c3a827d21245b82dc695e7d3f94689f27c75ff4ae8b73202fbc441f0f6bc7f8102b8392d1adf428e48b06daf67aa3a0c545b385ea60d9c89139b56232028ea4e002b1f0eb994de0061aed0d5fe00f88f80deb44320c265b5be07b7930359023ecbacc91e6ed0063f7565ca10e6ed8d5125ad1b011e4925ff45dfb754f2732d15350a660aef4558ffc67804d64d2367552e97a699a18783e3d45018b9da268"}, {@device_b, @device_b, 0xc6, "8d765532b139786f3cb46bceac3fe9b37c20cc1f55306360bb3adb6adf4ce128413157931fba21b99119c7f7c6a977cb616753efe33b9c560c983562a769000a41727b5723e49c65adfbfcfb4119f0c21806a432d2832995ed58dbe9a670dd3c9681a36adb9e555a85863d6134c6f85ff5570a76da4c8b2b58f370dd19070654e4dbf75b158e636240aae36af9bd736fccd4c80661770940437e6602566b4b5db4727717175578fb9195dd9f6ee424254e3b6146ea49745e1f5e8f80ba1cead373a984ba1caf"}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x84}, 0x84) 23:42:18 executing program 6: newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x83bb35beb319b3ea, 0x0) unlinkat(r4, &(0x7f0000000580)='./file0\x00', 0x200) bind$packet(r2, &(0x7f0000000040)={0x11, 0x11, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) r5 = openat2(r4, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0xa800, 0x6, 0x19}, 0x18) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000640)={0x0, 0x1004}, 0x4) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000080)=@ll={0x11, 0x1c, r3, 0x1, 0x1f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="1ee0e66740200d879be226f5f0873de3805e1cb64ef43860b432c7391d888e8e2ee76f622bc297829a35fcbce05f83dd6485fbc00fcb53137bf628a33b4873cfba3abbdf4e12e569e79bd06b289648d00a2f0b64962851532a77e397344e6137819801e4f6b83b1a1986bfd53f5ea2775ce9eaecb65e55e9a566ef1521eceb6c0237a509ea8a093dae4c597f9b64e4267c77fd1daffb83f50c0070c710192633323e043b51cc14b805e1bc714edf04719ccab2a1f3fbb6eafa051be688cc9b0b8235fc3219e69222cce24b0c9af611c6e650c9427c47dba51073951487", 0xdd}, {&(0x7f0000000200)="2002ffc945969662e75f28da7b0e18b1ade6a213dec628191dfa18da69d0fe19851af87b23b880124703e29cce313239cd2e9902d7ed50c5009cceb2f96f64ff3f65573209b3b5d4f9ac96f7577aea39d8b55fe60c521dcc4b258471179adc4f93d89baa02d7b3b7cf69403972b7d147528123d4399ce69755e68ab4e87164e8e3549c77c57160b7ecb294aa74388d62e2c51912a3f2bb876444bbc9e041114d5677496db6cb499592aa123420818d6b9cd9605c5e16af79d354c2cb94f88d393dbc154dfe", 0xc5}], 0x2, &(0x7f0000000300)=[{0x110, 0x104, 0x15e08000, "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"}], 0x110}, 0x40040) 23:42:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:18 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffff9700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x80500) [ 3121.825158] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3121.844521] FAULT_INJECTION: forcing a failure. [ 3121.844521] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.845647] CPU: 1 PID: 19134 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3121.846202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.846869] Call Trace: [ 3121.847028] netlink: 1792 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3121.847098] dump_stack+0x107/0x167 [ 3121.848716] should_fail.cold+0x5/0xa [ 3121.849024] ? create_object.isra.0+0x3a/0xa20 [ 3121.849399] should_failslab+0x5/0x20 [ 3121.849703] kmem_cache_alloc+0x5b/0x310 [ 3121.850037] create_object.isra.0+0x3a/0xa20 [ 3121.850389] kmemleak_alloc_percpu+0xa0/0x100 [ 3121.850763] pcpu_alloc+0x4e2/0x1240 [ 3121.851079] probe_event_enable+0x537/0xa20 [ 3121.851421] ? uprobe_perf_close+0x5f0/0x5f0 [ 3121.851766] ? pcpu_alloc+0x12a/0x1240 [ 3121.852100] trace_uprobe_register+0x54/0x730 [ 3121.852465] perf_trace_event_init+0x554/0x9c0 [ 3121.852846] perf_uprobe_init+0x173/0x210 [ 3121.853180] perf_uprobe_event_init+0xff/0x1d0 [ 3121.853543] perf_try_init_event+0x130/0x570 [ 3121.853890] perf_event_alloc.part.0+0xd96/0x2b70 [ 3121.854287] __do_sys_perf_event_open+0x579/0x2e60 [ 3121.854673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3121.855065] ? perf_event_set_output+0x5b0/0x5b0 [ 3121.855433] ? wait_for_completion_io+0x270/0x270 [ 3121.855844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.856261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.856683] do_syscall_64+0x33/0x40 [ 3121.856973] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3121.857388] RIP: 0033:0x7fdb8bc19b19 [ 3121.857684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.859134] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3121.859724] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3121.860307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3121.860876] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3121.861433] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3121.861981] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3121.863435] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 26) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3121.917726] selinux_netlink_send: 38 callbacks suppressed [ 3121.917743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19137 comm=syz-executor.0 23:42:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xa0000) 23:42:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) 23:42:18 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005c000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3122.037121] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xf740}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3122.059356] FAULT_INJECTION: forcing a failure. [ 3122.059356] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.061221] CPU: 0 PID: 19195 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3122.062296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.063600] Call Trace: [ 3122.064040] dump_stack+0x107/0x167 [ 3122.064620] should_fail.cold+0x5/0xa [ 3122.065228] ? create_object.isra.0+0x3a/0xa20 [ 3122.065957] ? create_object.isra.0+0x3a/0xa20 [ 3122.066688] should_failslab+0x5/0x20 [ 3122.067297] kmem_cache_alloc+0x5b/0x310 [ 3122.067945] ? mark_held_locks+0x9e/0xe0 [ 3122.068612] create_object.isra.0+0x3a/0xa20 [ 3122.069330] kmemleak_alloc_percpu+0xa0/0x100 [ 3122.070056] pcpu_alloc+0x4e2/0x1240 [ 3122.070683] probe_event_enable+0x537/0xa20 [ 3122.071373] ? uprobe_perf_close+0x5f0/0x5f0 [ 3122.072076] ? pcpu_alloc+0x12a/0x1240 [ 3122.072709] trace_uprobe_register+0x54/0x730 [ 3122.073441] perf_trace_event_init+0x554/0x9c0 [ 3122.074184] perf_uprobe_init+0x173/0x210 [ 3122.074860] perf_uprobe_event_init+0xff/0x1d0 [ 3122.075589] perf_try_init_event+0x130/0x570 [ 3122.076297] perf_event_alloc.part.0+0xd96/0x2b70 [ 3122.077075] __do_sys_perf_event_open+0x579/0x2e60 [ 3122.077863] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.078622] ? perf_event_set_output+0x5b0/0x5b0 [ 3122.079372] ? wait_for_completion_io+0x270/0x270 [ 3122.080175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.081006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.081826] do_syscall_64+0x33/0x40 [ 3122.082413] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3122.083220] RIP: 0033:0x7fdb8bc19b19 23:42:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3122.083843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.086982] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3122.088214] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3122.089347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3122.090481] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.091621] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3122.092766] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:42:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3122.143765] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 27) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000006000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3122.240000] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3122.328797] FAULT_INJECTION: forcing a failure. [ 3122.328797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3122.329871] CPU: 1 PID: 19274 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3122.330428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.331098] Call Trace: [ 3122.331318] dump_stack+0x107/0x167 [ 3122.331618] should_fail.cold+0x5/0xa [ 3122.331931] __alloc_pages_nodemask+0x182/0x600 [ 3122.332315] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3122.332692] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3122.333180] ? pcpu_alloc+0x12a/0x1240 [ 3122.333500] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3122.333936] probe_event_enable+0x5b1/0xa20 [ 3122.334403] ? uprobe_perf_close+0x5f0/0x5f0 [ 3122.334767] trace_uprobe_register+0x54/0x730 [ 3122.335144] perf_trace_event_init+0x554/0x9c0 [ 3122.335520] perf_uprobe_init+0x173/0x210 [ 3122.335892] perf_uprobe_event_init+0xff/0x1d0 [ 3122.336413] perf_try_init_event+0x130/0x570 [ 3122.336844] perf_event_alloc.part.0+0xd96/0x2b70 [ 3122.337246] __do_sys_perf_event_open+0x579/0x2e60 [ 3122.337647] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.338037] ? perf_event_set_output+0x5b0/0x5b0 [ 3122.338422] ? wait_for_completion_io+0x270/0x270 [ 3122.338828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.339244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.339666] do_syscall_64+0x33/0x40 [ 3122.339975] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3122.340395] RIP: 0033:0x7fdb8bc19b19 [ 3122.340695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.342147] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3122.342761] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3122.343489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3122.344082] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.344905] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3122.345477] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:42:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee00, 0xee01}, 0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) 23:42:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x100000) 23:42:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e0600000800038020cace8819620fe080379041caa364fbf643f0b56432da2d8048f810abe016f5cfd7cb90f7c6739463f17511a699cd80c07cb4cec9147199f84e67f1e7a64830fbb7742d6c0955b537dfbc0a739e0d70d0d47950628b42fcdc2e60be8f34b04372be947a116acc411926ab1cd059460a25c19e58a8ac00bb735ac09232ef32e86e7a3b8a8bab55ac6d4676a0905a79fbf405696b7bf8d30b500c9bb75e671c2fdb1a17327f739440a889282d0d64de965d79df9e7362b4de4e9f0e5bccd810", @ANYRES32=0x0, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="340056f16fbe75cad5c3aa009844a0dd7c2014a7c50d9ec0f743e60da2f08a11da49daf6dad2160bdf39de343dbb72c47a11855714fa3c8f721dafc7a17dbc5d63", @ANYRES16=r0, @ANYBLOB="010000000000000000008900000008000300806c335df852817c246b6f34cea63a2e082ff4d7b71f3b49c0621d0a55678ef882b8f4465813970500e1f1e12fca9818b358", @ANYRES32], 0x34}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x1524, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x1d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0xa}, {0x5, 0x9}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x5, 0x4}, {0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x3}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xff1b, 0x3f, 0x400, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe93, 0x9c99, 0x1000, 0x7fff, 0x9, 0x401, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x6}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0xa}, {0x4, 0x2}, {}, {}, {0x2, 0x2}, {0x5, 0x2}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PBSS={0x4}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x11bb, 0xf, [@measure_req={0x26, 0x1003, {0x20, 0x0, 0x0, "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"}}, @random_vendor={0xdd, 0x99, "bb0fd4daa3f5d46fc34fe612876ba0dd429b448fbbd8354906124927f24206a80e95835c2c7eda5e9c719cce4899af151b906c4b528ba77be7c1bc7ccfd71368f2782b34a4ba5452a7901fd1f95b1f0ce0fa0a38850ff6f9fd5105b40f8d049cdd4c75e2b1da377daf2dbaac99a0556afee51e1cf474deb8d93f0055037e6b3618d3f089775efdd970bbc1186765824bae4ded5b73ac0665a3"}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x0, 0x0, {0x60, 0x7f, 0x0, 0x20, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x81, 0x80}}, @fast_bss_trans={0x37, 0x7a, {0x81, 0x1, "1522d39669b59e8d73165d909ed48d43", "864a43463b40cca95e6a55a7840e135061e5b478c80b4f481cfc6bb392aad17d", "2ea9996d732d83686a55f5e0a15fd6de32f1dd3f326c1e835426dc128677545f", [{0x2, 0x26, "d7ebf368ebd919cdb177dcce17e3dd1ed0e31eb8c27a7663c4e4ad61bc7a679941b2430e43ee"}]}}, @preq={0x82, 0x62, @ext={{0x1}, 0x8, 0x4, 0x6, @broadcast, 0x9, @device_a, 0x3, 0x40, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x7fffffff}, {{}, @broadcast, 0x1ff}, {{}, @device_b, 0x3}, {{}, @device_b, 0x2}, {{0x1}, @device_b, 0x7f}, {{0x0, 0x0, 0x1}, @device_a, 0x8000}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x8, 0x3, @device_b, 0x3, 0x5, 0x1ff}}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_PROBE_RESP={0x1cf, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0xa8, 0xe, {@wo_ht={{}, {0x73b5}, @device_b, @broadcast, @from_mac=@device_b, {0x9, 0x20}}, 0x7, @default, 0x14, @void, @val, @val={0x3, 0x1, 0xb2}, @void, @val={0x6, 0x2, 0x7ff}, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x100000001, 0x7b3, 0x0, 0x45, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x7, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x40, 0x0, 0xffffffffffffffff, 0x5}}, @void, [{0xdd, 0x45, "4484743aa88f4280057cf096b2759b93363da3388c8ad214ae161b0b47c3cc6a5ac4819cdd568379681f604b6be356b9f254d73abcbbcf7b5636659414ccd314a9200f5777"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x149}]}, 0x1524}, 0x1, 0x0, 0x0, 0x41}, 0x4080) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r6, &(0x7f00000000c0)="04", 0x1, 0x3ff03) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4008081) 23:42:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 28) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xfd00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:33 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005d800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3136.646615] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3136.648959] FAULT_INJECTION: forcing a failure. [ 3136.648959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3136.650434] CPU: 0 PID: 19289 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3136.651200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3136.651996] Call Trace: [ 3136.652284] dump_stack+0x107/0x167 [ 3136.652657] should_fail.cold+0x5/0xa [ 3136.653037] __alloc_pages_nodemask+0x182/0x600 [ 3136.653503] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3136.653965] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3136.654563] ? lockdep_init_map_type+0x2c7/0x780 [ 3136.655002] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3136.655515] ? __raw_spin_lock_init+0x36/0x110 [ 3136.655970] probe_event_enable+0x5b1/0xa20 [ 3136.656403] ? uprobe_perf_close+0x5f0/0x5f0 [ 3136.656849] trace_uprobe_register+0x54/0x730 [ 3136.657304] perf_trace_event_init+0x554/0x9c0 [ 3136.657766] perf_uprobe_init+0x173/0x210 [ 3136.658192] perf_uprobe_event_init+0xff/0x1d0 [ 3136.658653] perf_try_init_event+0x130/0x570 [ 3136.659100] perf_event_alloc.part.0+0xd96/0x2b70 [ 3136.659590] __do_sys_perf_event_open+0x579/0x2e60 [ 3136.660082] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3136.660566] ? perf_event_set_output+0x5b0/0x5b0 [ 3136.661028] ? wait_for_completion_io+0x270/0x270 [ 3136.661525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3136.662036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3136.662542] do_syscall_64+0x33/0x40 [ 3136.662903] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3136.663398] RIP: 0033:0x7fdb8bc19b19 [ 3136.663767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3136.665529] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3136.666257] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3136.666936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3136.667622] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3136.668316] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3136.669005] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3136.687686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 23:42:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 29) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:33 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005e600000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 23:42:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x200103a7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x800000) [ 3136.807893] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3136.879199] FAULT_INJECTION: forcing a failure. [ 3136.879199] name failslab, interval 1, probability 0, space 0, times 0 [ 3136.880142] CPU: 1 PID: 19411 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3136.880719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3136.881354] Call Trace: [ 3136.881584] dump_stack+0x107/0x167 [ 3136.881867] should_fail.cold+0x5/0xa [ 3136.882191] ? __uprobe_register+0x19c/0x880 [ 3136.882536] should_failslab+0x5/0x20 [ 3136.882854] kmem_cache_alloc_trace+0x55/0x320 [ 3136.883236] __uprobe_register+0x19c/0x880 [ 3136.883606] probe_event_enable+0x448/0xa20 [ 3136.883943] ? uprobe_perf_close+0x5f0/0x5f0 [ 3136.884329] trace_uprobe_register+0x54/0x730 [ 3136.884689] perf_trace_event_init+0x554/0x9c0 [ 3136.885065] perf_uprobe_init+0x173/0x210 [ 3136.885397] perf_uprobe_event_init+0xff/0x1d0 [ 3136.885782] perf_try_init_event+0x130/0x570 [ 3136.886124] perf_event_alloc.part.0+0xd96/0x2b70 [ 3136.886536] __do_sys_perf_event_open+0x579/0x2e60 [ 3136.886925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3136.887320] ? perf_event_set_output+0x5b0/0x5b0 [ 3136.887682] ? wait_for_completion_io+0x270/0x270 [ 3136.888100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3136.888508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3136.888942] do_syscall_64+0x33/0x40 [ 3136.889232] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3136.889651] RIP: 0033:0x7fdb8bc19b19 [ 3136.889964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3136.891489] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3136.892132] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3136.892822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3136.893407] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3136.894055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3136.894677] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:42:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1000000) 23:42:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x7ffff000}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:46 executing program 6: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001500)={0x2, 0x7}, 0x34) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xa005}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x25c6, 0x5, 0x7f, 0x1ff}]}, 0x10) 23:42:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:46 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @remote}, &(0x7f0000000200)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x32, 0x4, @thr={&(0x7f0000000640)="4c5fb7ad5964e606fdd3cefd0bcab45272f8396a1699bdb377b0444a66e131e06c1a8a956ddd17bb45700dfe9fac977c160dbe0d940c6b188a6bb681eabccc178214505f233dab3fd446a7186a376ae6a8b52f937acb5e62f3c100fb62dadaca8414ebe2466666c2426c6b3395db7675bc256a37c148a037ad42df7f7dd4c5e0ef3840042904ba7ed45c65e077d34ea1d25802534160d6dba647e7ac3f1894", 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x78, 0x1d, 0x8, 0x70bd29, 0x25dfdbfe, {0x13}, [@generic, @generic="3be82c383a47eb3b6e12110130fefd3b84229110cd61ea78463012c26831a1a97d6f52b28d3a5054647bf533fb6a6bef7d4abe9596f22b6e668ef1b4c6b78e8b6cf6ec48004785066354ca8d5306d44e8bdf6e4106164908614ebbcf1aa1e9fe6887"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d00fe00080000000000000000"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) 23:42:46 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000002e700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 30) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3149.989636] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3150.002865] FAULT_INJECTION: forcing a failure. [ 3150.002865] name failslab, interval 1, probability 0, space 0, times 0 [ 3150.004232] CPU: 1 PID: 19440 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3150.005079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3150.005902] Call Trace: [ 3150.006198] dump_stack+0x107/0x167 [ 3150.006574] should_fail.cold+0x5/0xa [ 3150.006984] ? create_object.isra.0+0x3a/0xa20 [ 3150.007461] should_failslab+0x5/0x20 [ 3150.007887] kmem_cache_alloc+0x5b/0x310 [ 3150.008366] create_object.isra.0+0x3a/0xa20 [ 3150.008832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3150.009354] kmem_cache_alloc_trace+0x151/0x320 [ 3150.009869] __uprobe_register+0x19c/0x880 [ 3150.010390] probe_event_enable+0x448/0xa20 [ 3150.010846] ? uprobe_perf_close+0x5f0/0x5f0 [ 3150.011430] trace_uprobe_register+0x54/0x730 [ 3150.011914] perf_trace_event_init+0x554/0x9c0 [ 3150.012404] perf_uprobe_init+0x173/0x210 [ 3150.012853] perf_uprobe_event_init+0xff/0x1d0 [ 3150.013325] perf_try_init_event+0x130/0x570 [ 3150.013804] perf_event_alloc.part.0+0xd96/0x2b70 [ 3150.014307] __do_sys_perf_event_open+0x579/0x2e60 [ 3150.014835] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3150.015326] ? perf_event_set_output+0x5b0/0x5b0 [ 3150.015827] ? wait_for_completion_io+0x270/0x270 [ 3150.016360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3150.016900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3150.017435] do_syscall_64+0x33/0x40 [ 3150.017833] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3150.018344] RIP: 0033:0x7fdb8bc19b19 [ 3150.018735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3150.020535] RSP: 002b:00007fdb8918f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3150.021343] RAX: ffffffffffffffda RBX: 00007fdb8bd2cf60 RCX: 00007fdb8bc19b19 [ 3150.022015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3150.022772] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3150.023521] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3150.024281] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 [ 3150.025658] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xfffffdef}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:42:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:42:46 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000003e800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3150.124898] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:42:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x1000003) 23:42:46 executing program 6: prctl$PR_GET_SECCOMP(0x15) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4) prctl$PR_GET_SECCOMP(0x15) 23:42:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 31) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:42:46 executing program 0: r0 = creat(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2800, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)={0x48, 0x7, 0xa, 0x301, 0x0, 0x0, {0xc}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) unshare(0x48020200) 23:42:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3150.302405] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3150.312248] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3150.316211] FAULT_INJECTION: forcing a failure. [ 3150.316211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3150.317572] CPU: 0 PID: 19561 Comm: syz-executor.3 Not tainted 5.10.210 #1 [ 3150.318334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3150.319199] Call Trace: [ 3150.319498] dump_stack+0x107/0x167 [ 3150.319897] should_fail.cold+0x5/0xa [ 3150.320349] _copy_to_user+0x2e/0x180 [ 3150.320784] simple_read_from_buffer+0xcc/0x160 [ 3150.321292] proc_fail_nth_read+0x198/0x230 [ 3150.321798] ? proc_sessionid_read+0x230/0x230 [ 3150.322286] ? security_file_permission+0x24e/0x570 [ 3150.322840] ? perf_trace_initcall_start+0x101/0x380 [ 3150.323408] ? proc_sessionid_read+0x230/0x230 [ 3150.323929] vfs_read+0x228/0x580 [ 3150.324344] ksys_read+0x12d/0x260 [ 3150.324748] ? vfs_write+0xa70/0xa70 [ 3150.325175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3150.325733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3150.326307] do_syscall_64+0x33/0x40 [ 3150.326693] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3150.327293] RIP: 0033:0x7fdb8bbcc69c [ 3150.327687] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3150.329686] RSP: 002b:00007fdb8918f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3150.330505] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fdb8bbcc69c [ 3150.331284] RDX: 000000000000000f RSI: 00007fdb8918f1e0 RDI: 0000000000000004 [ 3150.332019] RBP: 00007fdb8918f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3150.332803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3150.333585] R13: 00007ffe4efb093f R14: 00007fdb8918f300 R15: 0000000000022000 23:43:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x26}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:01 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000001f400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2000000) 23:43:01 executing program 6: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r2 = getegid() setxattr$system_posix_acl(0x0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xffffffffffffffff}, {}], {0x4, 0x2}, [{0x8, 0x0, r2}]}, 0x3c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 23:43:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)={r2, r3+10000000}, 0x1, 0x0, 0x1, {0x0, r5}}, 0x100) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)={@initdev, @broadcast, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x8, 0x81, 0x2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x2}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x1, 0x8, 0x1, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x0, 0x20}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x19c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_mount_image$nfs4(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000240)="b2", 0x1, 0x100000000}], 0x0, &(0x7f0000000840)) [ 3165.226864] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3165.238068] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:43:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:16 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x2007, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x0, 0x4c, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r2 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x0, 0x375, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000400)=@FILEID_INO32_GEN={0x8, 0x1, {0x4, 0x80000001}}, 0x400402) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 23:43:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r0, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) r2 = fcntl$getown(r1, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsdef=mntinfo\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="81b4e9efd02c00"]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) openat(r0, &(0x7f00000011c0)='./file1\x00', 0x2a040, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001180)) r4 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0x4, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000010c0), 0x1}, 0x1031a, 0x1, 0x401, 0x9, 0x4, 0x200, 0x3, 0x0, 0x7, 0x0, 0x4}, r2, 0x8, r4, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200000006000000000000000000", @ANYBLOB="00f700"], 0x340}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000001200)=0x8, 0x4) 23:43:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2000006) 23:43:16 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000fd00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3180.492546] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3180.511979] 9pnet: Insufficient options for proto=fd 23:43:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r0, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) r2 = fcntl$getown(r1, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsdef=mntinfo\x00,euid=', @ANYRESDEC=0x0, @ANYBLOB="81b4e9efd02c00"]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) openat(r0, &(0x7f00000011c0)='./file1\x00', 0x2a040, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001180)) r4 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0x4, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000010c0), 0x1}, 0x1031a, 0x1, 0x401, 0x9, 0x4, 0x200, 0x3, 0x0, 0x7, 0x0, 0x4}, r2, 0x8, r4, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200000006000000000000000000", @ANYBLOB="00f700"], 0x340}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000001200)=0x8, 0x4) 23:43:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x200f5ef) 23:43:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffffff00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:17 executing program 6: r0 = open(&(0x7f0000000140)='./file1/file0\x00', 0x100, 0x38) statx(r0, 0x0, 0x100, 0x8, &(0x7f00000001c0)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f00000006c0)='./file1/file0\x00', &(0x7f0000000700)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x42800) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0x9e46, 0x0) dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x1800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001d0083ebe10d00000000040004e19474a009018a08000c0000000000"], 0x1c}}, 0x0) 23:43:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) [ 3180.735246] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3180.769411] 9pnet: Insufficient options for proto=fd 23:43:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x2010000) [ 3181.106560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19954 comm=syz-executor.6 23:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fchdir(r0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_complete(0x0) syz_io_uring_setup(0x5, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) fcntl$setownex(r0, 0xf, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0c8}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) [ 3181.133025] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3181.141179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19963 comm=syz-executor.6 23:43:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66646c726664a898d2f34959bcace82065", @ANYRESHEX, @ANYBLOB="2c84bffe1e2b35", @ANYRESHEX, @ANYBLOB="2c636169742d5f2a1816b2d3b064755b6368653d6d6d61702c63616368653d6c6f6f73652c000000000000ffff6163f3003d6d6d61702c667363006e746578743d737973613d212c6f626a5f747970653d63616368653d6c6f6f73652c00"/107]) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', &(0x7f0000000140)='fscontext', &(0x7f0000000180)='cache=mmap', &(0x7f00000001c0)='$g\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000003940)=ANY=[@ANYBLOB="08000000023e000001000000470f00007fe04e1036abe71bd55c64076c4b41bb7923a310597e6aa2b3773fb9a3248a0c58faeea1314cfddc2f34b4e00fdfb6f6d82ebe1a7475fec564eff67ddf64f630"], 0x8080) llistxattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=""/194, 0xc2) 23:43:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3000000) 23:43:38 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) fcntl$dupfd(r0, 0x406, r1) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:unconfined_exec_t:s0\x00', 0xffffff6e) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x7fff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x84002, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_9p2000}, {@cache_none}, {@debug={'debug', 0x3d, 0x2}}, {@uname={'uname', 0x3d, ')&%^:--'}}, {@msize={'msize', 0x3d, 0x1}}, {@afid={'afid', 0x3d, 0x401}}, {@msize={'msize', 0x3d, 0x401}}], [{@smackfsdef={'smackfsdef', 0x3d, '$\\'}}]}}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 23:43:38 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x6, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3202.508119] 9pnet: Could not find request transport: fdlrfd¨˜ÒóIY¼¬è e0xffffffffffffffff 23:43:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x2800b0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="736f75726e616c5f646576a4b6dd743030f9ff303030302c0000000000001300"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x21) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x3cd01, 0x4b) [ 3202.549126] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:43:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x19}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x3000001) 23:43:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3202.747288] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 3202.790947] EXT4-fs (sda): Unrecognized mount option "sournal_dev¤¶Ýt00ùÿ0000" or missing value 23:43:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3202.831243] EXT4-fs (sda): Unrecognized mount option "sournal_dev¤¶Ýt00ùÿ0000" or missing value 23:43:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3202.930340] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:43:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x4000000) 23:43:53 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) 23:43:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x74, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x10, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x20, 0x9) io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b4040306ed526f87c3b201126d2e2f66696c653004"]) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0xd7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) openat(r2, &(0x7f0000000140)='./file0\x00', 0x210282, 0x118) perf_event_open(&(0x7f0000001d80)={0x0, 0xf5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xb7b17d0d, 0x4, 0x71cb0190, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r3, r1) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x4, 0x5}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0xe800, &(0x7f0000000240)={[{@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x1d]}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x2c, 0x1b, 0x2d]}}}}], [{@smackfsdef}, {@fsname={'fsname', 0x3d, '!,^)[.{/'}}, {@smackfsdef={'smackfsdef', 0x3d, ','}}, {@fsname={'fsname', 0x3d, '.:'}}, {@obj_user={'obj_user', 0x3d, '-\x06'}}]}) [ 3217.327680] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 23:43:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:43:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001200cd61000000000000000028001a"], 0x38}}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@newsa={0x35c, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x3b, 0x0, r2}, {@in6=@loopback, 0x4d6, 0x33}, @in6=@loopback, {0x8, 0x8ef, 0x6, 0xd, 0x800, 0xa2, 0x4, 0xcd85}, {0x5, 0x543, 0xfffffffffffffffa, 0xfffffffffffffffb}, {0xff, 0x4, 0x2}, 0x70bd29, 0x3503, 0x2, 0x0, 0x7, 0x8}, [@tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x4d6, 0x2b}, 0xa, @in=@multicast1, 0x34ff, 0x1, 0x3, 0x8, 0x9, 0x7ff, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x32}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x9, 0x7fff, 0x400, 0x8000}, {{@in=@local, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x3507, 0x1, 0x1, 0xd9, 0x4, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d4, 0xff}, 0xa, @in6=@mcast2, 0x3500, 0x0, 0x1, 0x3f, 0x6, 0x7, 0x6}]}, @replay_thresh={0x8, 0xb, 0x1}, @policy_type={0xa}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x5}}, @coaddr={0x14, 0xe, @in=@remote}, @tmpl={0x104, 0x5, [{{@in6=@private0, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x3504, 0x3, 0x0, 0x0, 0x4, 0x5, 0x40}, {{@in=@remote, 0x4d5, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x2, 0x7, 0x80000000, 0x9, 0x400}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in6=@remote, 0x3505, 0x1, 0x1, 0x1, 0x3f, 0x4, 0x7ff}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x3, 0x3, 0x1f, 0xe3e8, 0x6, 0x2}]}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@empty, 0x2, 0x1, 0x9}}, @replay_thresh={0x8, 0xb, 0x2}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000}, 0x240440d4) 23:43:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3e}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x11, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:53 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x5000000) 23:43:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3217.570884] ref_ctr_offset mismatch. inode: 0x3e3e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 23:43:54 executing program 6: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ee6e", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x1, 0x0, 'qP'}]}}}}}}, 0x0) 23:43:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:43:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x21, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:54 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:43:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000020000000018000000d0829dd6110ff5fe54243e8a7f0d0c6a0e061ab23b245261dc5dce9ad44bf22a2bf1701767948c5065c6daaac1444f5f3575e67d2f30b714e8d192e9ad557ff24c1c3e1cb5c81a2b66bfc8a6969b0baca7704119fffcc19e3594a91594301c985ad32dde4dbaee5e00e826fe16bbd6f7e74979c795b4395e1382575a9444aef6f083c72c9f436740514bd196a6761da4ce3fdaf7d9bc0ad2d26d7a5b4040290f1be47cb1e26673511567a18ab6883062db7dd92fefb9195c41f21f20a56900"/216, @ANYRES32, @ANYBLOB="00000000000100010000000000652000"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f00000005c0)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) 23:43:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x6000000) 23:43:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:43:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9b}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) [ 3217.848875] cgroup: Invalid name [ 3217.862374] cgroup: Invalid name 23:44:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:44:07 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000020000000018000000d0829dd6110ff5fe54243e8a7f0d0c6a0e061ab23b245261dc5dce9ad44bf22a2bf1701767948c5065c6daaac1444f5f3575e67d2f30b714e8d192e9ad557ff24c1c3e1cb5c81a2b66bfc8a6969b0baca7704119fffcc19e3594a91594301c985ad32dde4dbaee5e00e826fe16bbd6f7e74979c795b4395e1382575a9444aef6f083c72c9f436740514bd196a6761da4ce3fdaf7d9bc0ad2d26d7a5b4040290f1be47cb1e26673511567a18ab6883062db7dd92fefb9195c41f21f20a56900"/216, @ANYRES32, @ANYBLOB="00000000000100010000000000652000"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f00000005c0)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) 23:44:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x6000002) 23:44:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x29, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:44:07 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0xea, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) r1 = getpgrp(0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x101) pidfd_open(r1, 0x0) r2 = getpgrp(0x0) setns(0xffffffffffffffff, 0x8000000) unshare(0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) io_uring_enter(r3, 0x5f8c, 0xe95c, 0x1, &(0x7f0000000040)={[0x8]}, 0x8) pidfd_open(r2, 0x0) kcmp(r1, r2, 0x0, r0, r0) 23:44:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2b, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3230.743870] cgroup: Invalid name 23:44:07 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') syz_io_uring_setup(0x5af1, &(0x7f00000000c0)={0x0, 0xc8aa, 0x2, 0x3, 0x14a, 0x0, r1}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x10000, 0xca) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1000009, 0x110, r3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r1, &(0x7f00000001c0)={0x40400, 0x4, 0x1}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x9) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/257, 0x101}], 0x1, 0x1, 0x0) 23:44:07 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:44:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) dup2(r1, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:44:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:44:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x7000000) 23:44:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x74) close_range(r0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d77cea141873a9859e2792e700", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 23:44:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2c, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:20 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x300}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2f, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3244.316335] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,,errors=continue 23:44:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x8000000) 23:44:35 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:44:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180), 0x2, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:44:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="84b957ebed1d4e94721e0350e0a606f351686c651b5f799b7f5422475b01f186931def37ae802d768b886d1d0bd52a0550479a5256da728b799896338325f260acb525c487a94ae6f81ff9c83c8a9740f0893738c469bb272ee7a60958748a9dcaace51fd5e5f3ae143481a2a6bc2762af36d77f02098b1adc1ecc9129ecd75130aaf61f7e93050d97649f024af13154c05d285d41785bbbbc05ba6b81f5292b39fb25a78b9195b5a49ce27d07833444f8d93cd05bd72406bb3c680c5d49cb0e53c056298099943a14bdbad70d5a8240098424fc5e25f4c7dd200748c49ddc6267d2f7f8185d62aa1decee4dd7981f060903bd2e0a09", 0xf6, 0x7dc0e5df}], 0x22000, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,nfs=nostale_ro,dots,audit,smackfsdef=^-,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d307830303030ff07303030303030303366662c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d7d2f2c61707072616973652c7375626a5f757365723d24e83a1724242f5e21292c04f57d2a242d245e2c736d61636b66737472616e73727574653d2d2c00"]) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x145) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r2, r1, r3]}, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) 23:44:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x32, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0400001208001b"], 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={{r7}, 0x7, 0x80, 0xfff}) syz_io_uring_setup(0x6666, &(0x7f0000000000)={0x0, 0x30ad, 0x10, 0x0, 0x16e, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) syz_io_uring_submit(r4, r8, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0x3, {0x0, r9}, 0x9, 0x4, 0x1, {0x0, 0x0, r1}}, 0x4) 23:44:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x900}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) write(r4, &(0x7f0000000180)="63b14cd9581b9c8a1317e7ac2c0245ed6f0390f2a62cbf2fd59d9aadbb823c7e30ea9a402f3ea9a510d11ac958b6b851d77d4e3d9bfb30e0fcb6cd2dc9183a5fe8cfbd45f9e0f4a567f62d2170e7a107140e99c2b12c4f3e8e1421f3d6db0c0806479c17efb4f06d75e9090096d23146eb363275ecc9faf958d0efe43d915c9915d17ff9a2db244ef2e07bf39dc2f9b5cb9bca33123159c47260ab5d665bb92e833cec46cbea07a207f8196f7ce71c33207b4e87a4c1765242d52c312f01aa82745f0387fd0c1b4903dc43a651f4319feb96e40a4d4f133b636c4a295d814cfee9f22e84f0f6a7fd3e23a94d66b62e3df53f90fd", 0xf4) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x33, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x9000000) 23:44:35 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0400001208001b"], 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={{r7}, 0x7, 0x80, 0xfff}) syz_io_uring_setup(0x6666, &(0x7f0000000000)={0x0, 0x30ad, 0x10, 0x0, 0x16e, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) syz_io_uring_submit(r4, r8, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0x3, {0x0, r9}, 0x9, 0x4, 0x1, {0x0, 0x0, r1}}, 0x4) 23:44:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa00}, [{}], "8eaf052c18cecd951437d16b925c7be0a50c0498a7a76c7bd0a63eb247ed971f4bf66961064327c13b41e945d619da495f0e47fe32181e306668a7f22d52e6d39830d9b7280c0388595e054297c44d7d3276a14e943afbc5e41d33655fa78392f4f4b11394263e92566035929b71"}, 0xe6) 23:44:35 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 23:44:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0xe52}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x20, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0xa000000) VM DIAGNOSIS: 23:49:42 Registers: info registers vcpu 0 RAX=ffffffff83e636e0 RBX=0000000000000000 RCX=ffffffff83e4b70c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e63ce8 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85673948 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e636ee RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f010ba30010 CR3=0000000017988000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=002a03fe016c6c6f502e726567616e61 XMM02=000000c0009661c0000000c000966140 XMM03=000000c0009662c0000000c000966240 XMM04=000000c000885080000000c000884f80 XMM05=000000c000885280000000c000885200 XMM06=000000c0008a57d0000000c000885380 XMM07=000000c000829200000000c0008a5800 XMM08=000000c0009ab840000000c0008ec700 XMM09=000000c000a4ce00000000c000a4c100 XMM10=000000c000a4d680000000c000a4d400 XMM11=000000c000828de0000000c000a6f000 XMM12=000000c000828ea0000000c000828e40 XMM13=786508006c61746f7420636578650a00 XMM14=616d7320636578650a006e6567206365 XMM15=000073746e696820636578650a006873 info registers vcpu 1 RAX=ffffffff83e636e0 RBX=0000000000000001 RCX=ffffffff83e4b70c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e63ce8 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85673948 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e636ee RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563554ca0678 CR3=000000000fa70000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=e9b5a09ca8acd9950000000000957f48 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=765859c76c6144e100000000000ae968 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000