./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2190920071
<...>
Warning: Permanently added '10.128.0.144' (ECDSA) to the list of known hosts.
execve("./syz-executor2190920071", ["./syz-executor2190920071"], 0x7ffc32dddce0 /* 10 vars */) = 0
brk(NULL) = 0x555555a32000
brk(0x555555a32c40) = 0x555555a32c40
arch_prctl(ARCH_SET_FS, 0x555555a32300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2190920071", 4096) = 28
brk(0x555555a53c40) = 0x555555a53c40
brk(0x555555a54000) = 0x555555a54000
mprotect(0x7fa7841b4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
getpid() = 5012
mkdir("./syzkaller.qgP3s9", 0700) = 0
chmod("./syzkaller.qgP3s9", 0777) = 0
chdir("./syzkaller.qgP3s9") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5014 attached
, child_tidptr=0x555555a325d0) = 5014
[pid 5014] chdir("./0") = 0
[pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5014] setpgid(0, 0) = 0
[pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5014] write(3, "1000", 4) = 4
[pid 5014] close(3) = 0
[pid 5014] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5014] memfd_create("syzkaller", 0) = 3
[pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa77bcf3000
[ 54.951871][ T5014] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5014 'syz-executor219'
[pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5014] munmap(0x7fa77bcf3000, 16777216) = 0
[pid 5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5014] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5014] close(3) = 0
[pid 5014] mkdir("./bus", 0777) = 0
[ 55.118281][ T5014] loop0: detected capacity change from 0 to 32768
[ 55.131777][ T5014] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor219 (5014)
[ 55.152485][ T5014] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 55.161386][ T5014] BTRFS info (device loop0): doing ref verification
[ 55.168182][ T5014] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 55.179070][ T5014] BTRFS info (device loop0): force zlib compression, level 3
[ 55.186688][ T5014] BTRFS info (device loop0): allowing degraded mounts
[ 55.193550][ T5014] BTRFS info (device loop0): using free space tree
[pid 5014] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5014] chdir("./bus") = 0
[pid 5014] ioctl(4, LOOP_CLR_FD) = 0
[pid 5014] close(4) = 0
[pid 5014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5014] fallocate(4, 0, 0, 1048820) = 0
[pid 5014] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5014] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5014] write(6, "12", 2) = 2
[ 55.214579][ T5014] BTRFS info (device loop0): auto enabling async discard
[ 55.258873][ T5014] FAULT_INJECTION: forcing a failure.
[ 55.258873][ T5014] name failslab, interval 1, probability 0, space 0, times 1
[ 55.272311][ T5014] CPU: 0 PID: 5014 Comm: syz-executor219 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0
[ 55.282757][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 55.292830][ T5014] Call Trace:
[ 55.296136][ T5014]
[ 55.299093][ T5014] dump_stack_lvl+0x1e7/0x2d0
[ 55.303827][ T5014] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.309323][ T5014] ? panic+0x770/0x770
[ 55.313420][ T5014] ? __might_sleep+0xc0/0xc0
[ 55.318035][ T5014] ? kmem_cache_free+0x292/0x500
[ 55.323008][ T5014] should_fail_ex+0x3aa/0x4e0
[ 55.327717][ T5014] should_failslab+0x9/0x20
[ 55.332240][ T5014] slab_pre_alloc_hook+0x59/0x2b0
[ 55.337296][ T5014] kmem_cache_alloc+0x52/0x300
[ 55.342082][ T5014] ? btrfs_dio_iomap_end+0x260/0x260
[ 55.347390][ T5014] ? alloc_extent_state+0x25/0x2e0
[ 55.352537][ T5014] alloc_extent_state+0x25/0x2e0
[ 55.357510][ T5014] __clear_extent_bit+0x1a7/0xb10
[ 55.362575][ T5014] btrfs_dio_iomap_begin+0xd40/0x10b0
[ 55.367984][ T5014] ? csum_exist_in_range+0x300/0x300
[ 55.373305][ T5014] ? filemap_range_has_page+0x31b/0x390
[ 55.378884][ T5014] ? csum_exist_in_range+0x300/0x300
[ 55.384199][ T5014] iomap_iter+0x677/0xec0
[ 55.388557][ T5014] ? blk_start_plug+0x99/0x110
[ 55.393345][ T5014] __iomap_dio_rw+0xd58/0x2250
[ 55.398119][ T5014] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 55.404087][ T5014] ? iomap_dio_complete_work+0x70/0x70
[ 55.409545][ T5014] ? __file_remove_privs+0x387/0x650
[ 55.414849][ T5014] ? inode_maybe_inc_iversion+0x1a3/0x1f0
[ 55.420574][ T5014] btrfs_dio_write+0xb6/0x100
[ 55.425241][ T5014] ? btrfs_dio_read+0x100/0x100
[ 55.430074][ T5014] ? btrfs_write_check+0x461/0x4f0
[ 55.435176][ T5014] btrfs_do_write_iter+0x61c/0x1020
[ 55.440369][ T5014] ? btrfs_check_nocow_unlock+0x40/0x40
[ 55.445917][ T5014] do_iter_write+0x84f/0xde0
[ 55.450502][ T5014] ? vfs_iter_write+0xa0/0xa0
[ 55.455164][ T5014] ? rcu_read_lock_any_held+0xb7/0x160
[ 55.460616][ T5014] do_pwritev+0x21a/0x360
[ 55.464932][ T5014] ? do_preadv+0x350/0x350
[ 55.469335][ T5014] ? do_notify_parent+0xf50/0xf50
[ 55.474343][ T5014] ? print_irqtrace_events+0x220/0x220
[ 55.479785][ T5014] ? syscall_enter_from_user_mode+0x32/0x230
[ 55.485753][ T5014] ? __x64_sys_pwritev2+0xbd/0x100
[ 55.490853][ T5014] do_syscall_64+0x41/0xc0
[ 55.495252][ T5014] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.501133][ T5014] RIP: 0033:0x7fa784140b29
[ 55.505531][ T5014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.525120][ T5014] RSP: 002b:00007ffeb17283a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 55.533520][ T5014] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa784140b29
[ 55.541476][ T5014] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 55.549430][ T5014] RBP: 00007ffeb17283e0 R08: 0000000000000000 R09: 0000000000000008
[pid 5014] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5014] exit_group(0) = ?
[pid 5014] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5014, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555a33620 /* 4 entries */, 32768) = 104
[ 55.557386][ T5014] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000006
[ 55.565341][ T5014] R13: 00007ffeb1728420 R14: 00007ffeb1728400 R15: 0000000000000000
[ 55.573359][ T5014]
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555a3b660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555a3b660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/bus") = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
getdents64(3, 0x555555a33620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a325d0) = 5036
./strace-static-x86_64: Process 5036 attached
[pid 5036] chdir("./1") = 0
[pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5036] setpgid(0, 0) = 0
[pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5036] write(3, "1000", 4) = 4
[pid 5036] close(3) = 0
[pid 5036] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5036] memfd_create("syzkaller", 0) = 3
[pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa77bcf3000
[pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5036] munmap(0x7fa77bcf3000, 16777216) = 0
[pid 5036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5036] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5036] close(3) = 0
[pid 5036] mkdir("./bus", 0777) = 0
[ 55.882595][ T5036] loop0: detected capacity change from 0 to 32768
[ 55.892280][ T5036] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor219 (5036)
[ 55.907564][ T5036] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 55.916595][ T5036] BTRFS info (device loop0): doing ref verification
[pid 5036] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5036] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5036] chdir("./bus") = 0
[pid 5036] ioctl(4, LOOP_CLR_FD) = 0
[pid 5036] close(4) = 0
[pid 5036] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5036] fallocate(4, 0, 0, 1048820) = 0
[pid 5036] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5036] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5036] write(6, "12", 2) = 2
[ 55.923274][ T5036] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 55.934100][ T5036] BTRFS info (device loop0): force zlib compression, level 3
[ 55.941508][ T5036] BTRFS info (device loop0): allowing degraded mounts
[ 55.948275][ T5036] BTRFS info (device loop0): using free space tree
[ 55.965153][ T5036] BTRFS info (device loop0): auto enabling async discard
[ 55.992378][ T5036] FAULT_INJECTION: forcing a failure.
[ 55.992378][ T5036] name failslab, interval 1, probability 0, space 0, times 0
[ 56.005265][ T5036] CPU: 0 PID: 5036 Comm: syz-executor219 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0
[ 56.015695][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 56.025756][ T5036] Call Trace:
[ 56.029053][ T5036]
[ 56.032004][ T5036] dump_stack_lvl+0x1e7/0x2d0
[ 56.036715][ T5036] ? nf_tcp_handle_invalid+0x650/0x650
[ 56.042203][ T5036] ? panic+0x770/0x770
[ 56.046297][ T5036] ? __might_sleep+0xc0/0xc0
[ 56.050904][ T5036] should_fail_ex+0x3aa/0x4e0
[ 56.055602][ T5036] should_failslab+0x9/0x20
[ 56.060126][ T5036] slab_pre_alloc_hook+0x59/0x2b0
[ 56.065182][ T5036] kmem_cache_alloc+0x52/0x300
[ 56.069971][ T5036] ? split_extent_map+0x63/0xc40
[ 56.074939][ T5036] split_extent_map+0x63/0xc40
[ 56.079738][ T5036] ? btrfs_dio_submit_io+0x680/0x680
[ 56.085047][ T5036] ? btrfs_dio_submit_io+0x680/0x680
[ 56.090365][ T5036] btrfs_dio_submit_io+0x498/0x680
[ 56.095505][ T5036] ? btrfs_create_dio_extent+0x180/0x180
[ 56.101163][ T5036] iomap_dio_bio_iter+0xe15/0x1430
[ 56.106332][ T5036] __iomap_dio_rw+0x11fa/0x2250
[ 56.111255][ T5036] ? iomap_dio_complete_work+0x70/0x70
[ 56.116768][ T5036] ? __file_remove_privs+0x387/0x650
[ 56.122095][ T5036] ? inode_maybe_inc_iversion+0x1a3/0x1f0
[ 56.127844][ T5036] btrfs_dio_write+0xb6/0x100
[ 56.132560][ T5036] ? btrfs_dio_read+0x100/0x100
[ 56.137438][ T5036] ? btrfs_write_check+0x461/0x4f0
[ 56.142592][ T5036] btrfs_do_write_iter+0x61c/0x1020
[ 56.147835][ T5036] ? btrfs_check_nocow_unlock+0x40/0x40
[ 56.153420][ T5036] do_iter_write+0x84f/0xde0
[ 56.158050][ T5036] ? vfs_iter_write+0xa0/0xa0
[ 56.162754][ T5036] ? rcu_read_lock_any_held+0xb7/0x160
[ 56.168261][ T5036] do_pwritev+0x21a/0x360
[ 56.172620][ T5036] ? do_preadv+0x350/0x350
[ 56.177075][ T5036] ? do_notify_parent+0xf50/0xf50
[ 56.182124][ T5036] ? print_irqtrace_events+0x220/0x220
[ 56.187610][ T5036] ? syscall_enter_from_user_mode+0x32/0x230
[ 56.193620][ T5036] ? __x64_sys_pwritev2+0xbd/0x100
[ 56.198755][ T5036] do_syscall_64+0x41/0xc0
[ 56.203191][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.209103][ T5036] RIP: 0033:0x7fa784140b29
[ 56.213510][ T5036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.233113][ T5036] RSP: 002b:00007ffeb17283a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 56.241525][ T5036] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa784140b29
[ 56.249489][ T5036] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 56.257468][ T5036] RBP: 00007ffeb17283e0 R08: 0000000000000000 R09: 0000000000000008
[ 56.265545][ T5036] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000006
[ 56.273514][ T5036] R13: 00007ffeb1728420 R14: 00007ffeb1728400 R15: 0000000000000001
[ 56.281488][ T5036]
[ 56.287092][ T5036] BTRFS warning (device loop0): direct IO failed ino 263 op 0x8801 offset 0x4000 len 4096 err no 9
[ 56.297883][ T5036] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN
[ 56.309582][ T5036] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[ 56.317983][ T5036] CPU: 0 PID: 5036 Comm: syz-executor219 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0
[ 56.328376][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 56.338414][ T5036] RIP: 0010:btrfs_finish_ordered_extent+0x43/0x3c0
[ 56.344907][ T5036] Code: 4c 24 10 48 89 54 24 08 48 89 74 24 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b8 4e f9 fd 49 8d 6e 60 49 89 ec 49 c1 ec 03 <41> 80 3c 1c 00 74 08 48 89 ef e8 7e 04 52 fe 4c 8b 7d 00 49 8d 9f
[ 56.364498][ T5036] RSP: 0018:ffffc90003a2f438 EFLAGS: 00010206
[ 56.370549][ T5036] RAX: ffffffff8392b4f8 RBX: dffffc0000000000 RCX: ffff888016b88000
[ 56.378507][ T5036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 56.386463][ T5036] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff838ef2c7
[ 56.394420][ T5036] R10: 0000000000000003 R11: ffff888016b88000 R12: 000000000000000c
[ 56.402380][ T5036] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8880193ba100
[ 56.410339][ T5036] FS: 0000555555a32300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 56.419255][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.425839][ T5036] CR2: 00005574bf324068 CR3: 000000002a606000 CR4: 00000000003506f0
[ 56.433801][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.441765][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.449720][ T5036] Call Trace:
[ 56.452991][ T5036]
[ 56.455909][ T5036] ? __die_body+0x5e/0xa0
[ 56.460230][ T5036] ? die_addr+0x99/0xc0
[ 56.464374][ T5036] ? exc_general_protection+0x3c2/0x5b0
[ 56.469914][ T5036] ? asm_exc_general_protection+0x26/0x30
[ 56.475625][ T5036] ? btrfs_dio_end_io+0xb7/0x470
[ 56.480549][ T5036] ? btrfs_finish_ordered_extent+0x38/0x3c0
[ 56.486427][ T5036] ? btrfs_finish_ordered_extent+0x43/0x3c0
[ 56.492304][ T5036] ? btrfs_finish_ordered_extent+0x38/0x3c0
[ 56.498184][ T5036] btrfs_dio_end_io+0x171/0x470
[ 56.503036][ T5036] ? btrfs_create_dio_extent+0x180/0x180
[ 56.508655][ T5036] iomap_dio_bio_iter+0xe15/0x1430
[ 56.513767][ T5036] __iomap_dio_rw+0x11fa/0x2250
[ 56.518618][ T5036] ? iomap_dio_complete_work+0x70/0x70
[ 56.524070][ T5036] ? __file_remove_privs+0x387/0x650
[ 56.529348][ T5036] ? inode_maybe_inc_iversion+0x1a3/0x1f0
[ 56.535082][ T5036] btrfs_dio_write+0xb6/0x100
[ 56.539765][ T5036] ? btrfs_dio_read+0x100/0x100
[ 56.544613][ T5036] ? btrfs_write_check+0x461/0x4f0
[ 56.549725][ T5036] btrfs_do_write_iter+0x61c/0x1020
[ 56.554932][ T5036] ? btrfs_check_nocow_unlock+0x40/0x40
[ 56.560470][ T5036] do_iter_write+0x84f/0xde0
[ 56.565058][ T5036] ? vfs_iter_write+0xa0/0xa0
[ 56.569727][ T5036] ? rcu_read_lock_any_held+0xb7/0x160
[ 56.575181][ T5036] do_pwritev+0x21a/0x360
[ 56.579499][ T5036] ? do_preadv+0x350/0x350
[ 56.583906][ T5036] ? do_notify_parent+0xf50/0xf50
[ 56.588918][ T5036] ? print_irqtrace_events+0x220/0x220
[ 56.594366][ T5036] ? syscall_enter_from_user_mode+0x32/0x230
[ 56.600340][ T5036] ? __x64_sys_pwritev2+0xbd/0x100
[ 56.605448][ T5036] do_syscall_64+0x41/0xc0
[ 56.609852][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.615734][ T5036] RIP: 0033:0x7fa784140b29
[ 56.620136][ T5036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.639728][ T5036] RSP: 002b:00007ffeb17283a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 56.648128][ T5036] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa784140b29
[ 56.656175][ T5036] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 56.664144][ T5036] RBP: 00007ffeb17283e0 R08: 0000000000000000 R09: 0000000000000008
[ 56.672108][ T5036] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000006
[ 56.680072][ T5036] R13: 00007ffeb1728420 R14: 00007ffeb1728400 R15: 0000000000000001
[ 56.688045][ T5036]
[ 56.691054][ T5036] Modules linked in:
[ 56.697414][ T5036] ---[ end trace 0000000000000000 ]---
[ 56.702917][ T5036] RIP: 0010:btrfs_finish_ordered_extent+0x43/0x3c0
[ 56.709436][ T5036] Code: 4c 24 10 48 89 54 24 08 48 89 74 24 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b8 4e f9 fd 49 8d 6e 60 49 89 ec 49 c1 ec 03 <41> 80 3c 1c 00 74 08 48 89 ef e8 7e 04 52 fe 4c 8b 7d 00 49 8d 9f
[ 56.729660][ T5036] RSP: 0018:ffffc90003a2f438 EFLAGS: 00010206
[ 56.735946][ T5036] RAX: ffffffff8392b4f8 RBX: dffffc0000000000 RCX: ffff888016b88000
[ 56.744106][ T5036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 56.752219][ T5036] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff838ef2c7
[ 56.760193][ T5036] R10: 0000000000000003 R11: ffff888016b88000 R12: 000000000000000c
[ 56.768408][ T5036] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8880193ba100
[ 56.776660][ T5036] FS: 0000555555a32300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 56.785736][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.792452][ T5036] CR2: 00005574bf324068 CR3: 000000002a606000 CR4: 00000000003506f0
[ 56.800421][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.808617][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.816728][ T5036] Kernel panic - not syncing: Fatal exception
[ 56.822993][ T5036] Kernel Offset: disabled
[ 56.827305][ T5036] Rebooting in 86400 seconds..