================================================================== BUG: KASAN: wild-memory-access in instrument_atomic_read_write include/linux/instrumented.h:96 [inline] BUG: KASAN: wild-memory-access in atomic_long_add include/linux/atomic/atomic-instrumented.h:3260 [inline] BUG: KASAN: wild-memory-access in percpu_ref_get_many+0x12f/0x140 include/linux/percpu-refcount.h:207 Write of size 8 at addr 4754627e9d293834 by task kworker/u8:16/9966 CPU: 1 UID: 0 PID: 9966 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: iou_exit io_ring_exit_work Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 kasan_report+0x118/0x150 mm/kasan/report.c:595 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x2b0/0x2c0 mm/kasan/generic.c:189 instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_long_add include/linux/atomic/atomic-instrumented.h:3260 [inline] percpu_ref_get_many+0x12f/0x140 include/linux/percpu-refcount.h:207 percpu_ref_get include/linux/percpu-refcount.h:222 [inline] obj_cgroup_get include/linux/memcontrol.h:770 [inline] refill_obj_stock+0x254/0x850 mm/memcontrol.c:3043 __memcg_slab_free_hook+0x127/0x3d0 mm/memcontrol.c:3217 memcg_slab_free_hook mm/slub.c:2206 [inline] slab_free mm/slub.c:4640 [inline] kfree+0x255/0x440 mm/slub.c:4842 io_remove_buffers_legacy+0x232/0x310 io_uring/kbuf.c:400 io_put_bl io_uring/kbuf.c:411 [inline] io_destroy_buffers+0x13c/0x230 io_uring/kbuf.c:430 io_ring_ctx_free+0xa5/0x500 io_uring/io_uring.c:2735 io_ring_exit_work+0x8c4/0x930 io_uring/io_uring.c:2971 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ==================================================================