./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2670506571
<...>
Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts.
execve("./syz-executor2670506571", ["./syz-executor2670506571"], 0x7ffc2c8b5c50 /* 10 vars */) = 0
brk(NULL) = 0x555555fee000
brk(0x555555feed00) = 0x555555feed00
arch_prctl(ARCH_SET_FS, 0x555555fee380) = 0
set_tid_address(0x555555fee650) = 5020
set_robust_list(0x555555fee660, 24) = 0
rseq(0x555555feeca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2670506571", 4096) = 28
getrandom("\x08\xe5\xae\x6d\x0f\x66\x4c\xa7", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555feed00
brk(0x55555600fd00) = 0x55555600fd00
brk(0x555556010000) = 0x555556010000
mprotect(0x7f4acf868000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
mkdir("./syzkaller.liku7G", 0700) = 0
chmod("./syzkaller.liku7G", 0777) = 0
chdir("./syzkaller.liku7G") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fee650) = 5021
./strace-static-x86_64: Process 5021 attached
[pid 5021] set_robust_list(0x555555fee660, 24) = 0
[pid 5021] chdir("./0") = 0
[pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5021] setpgid(0, 0) = 0
[pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5021] write(3, "1000", 4) = 4
[pid 5021] close(3) = 0
[pid 5021] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5021] memfd_create("syzkaller", 0) = 3
[pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ac73b0000
[ 44.131760][ T5021] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5021 'syz-executor267'
[pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5021] munmap(0x7f4ac73b0000, 16777216) = 0
[pid 5021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5021] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5021] close(3) = 0
[pid 5021] mkdir("./bus", 0777) = 0
[ 44.240691][ T5021] loop0: detected capacity change from 0 to 32768
[ 44.251433][ T5021] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor267 (5021)
[ 44.268680][ T5021] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 44.277538][ T5021] BTRFS info (device loop0): doing ref verification
[pid 5021] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5021] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5021] chdir("./bus") = 0
[pid 5021] ioctl(4, LOOP_CLR_FD) = 0
[pid 5021] close(4) = 0
[pid 5021] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5021] fallocate(4, 0, 0, 1048820) = 0
[pid 5021] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5021] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5021] write(6, "12", 2) = 2
[ 44.284181][ T5021] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 44.294983][ T5021] BTRFS info (device loop0): force zlib compression, level 3
[ 44.302602][ T5021] BTRFS info (device loop0): allowing degraded mounts
[ 44.309423][ T5021] BTRFS info (device loop0): using free space tree
[ 44.326480][ T5021] BTRFS info (device loop0): auto enabling async discard
[pid 5021] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5021] exit_group(0) = ?
[pid 5021] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5021, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555555fef6f0 /* 4 entries */, 32768) = 104
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555555ff7730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555ff7730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/bus") = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
getdents64(3, 0x555555fef6f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fee650) = 5048
./strace-static-x86_64: Process 5048 attached
[pid 5048] set_robust_list(0x555555fee660, 24) = 0
[pid 5048] chdir("./1") = 0
[pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5048] setpgid(0, 0) = 0
[pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5048] write(3, "1000", 4) = 4
[pid 5048] close(3) = 0
[pid 5048] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5048] memfd_create("syzkaller", 0) = 3
[pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ac73b0000
[pid 5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5048] munmap(0x7f4ac73b0000, 16777216) = 0
[pid 5048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5048] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5048] close(3) = 0
[pid 5048] mkdir("./bus", 0777) = 0
[ 44.604292][ T5048] loop0: detected capacity change from 0 to 32768
[ 44.613418][ T5048] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor267 (5048)
[ 44.627896][ T5048] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 44.636599][ T5048] BTRFS info (device loop0): doing ref verification
[ 44.643270][ T5048] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[pid 5048] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5048] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5048] chdir("./bus") = 0
[pid 5048] ioctl(4, LOOP_CLR_FD) = 0
[pid 5048] close(4) = 0
[pid 5048] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5048] fallocate(4, 0, 0, 1048820) = 0
[pid 5048] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5048] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5048] write(6, "12", 2) = 2
[pid 5048] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5048] exit_group(0) = ?
[pid 5048] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555555fef6f0 /* 4 entries */, 32768) = 104
[ 44.654089][ T5048] BTRFS info (device loop0): force zlib compression, level 3
[ 44.661525][ T5048] BTRFS info (device loop0): allowing degraded mounts
[ 44.668314][ T5048] BTRFS info (device loop0): using free space tree
[ 44.683012][ T5048] BTRFS info (device loop0): auto enabling async discard
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555555ff7730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555ff7730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/bus") = 0
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs") = 0
getdents64(3, 0x555555fef6f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fee650) = 5072
./strace-static-x86_64: Process 5072 attached
[pid 5072] set_robust_list(0x555555fee660, 24) = 0
[pid 5072] chdir("./2") = 0
[pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5072] setpgid(0, 0) = 0
[pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5072] write(3, "1000", 4) = 4
[pid 5072] close(3) = 0
[pid 5072] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5072] memfd_create("syzkaller", 0) = 3
[pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ac73b0000
[pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5072] munmap(0x7f4ac73b0000, 16777216) = 0
[pid 5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5072] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5072] close(3) = 0
[pid 5072] mkdir("./bus", 0777) = 0
[ 44.963489][ T5072] loop0: detected capacity change from 0 to 32768
[ 44.973245][ T5072] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor267 (5072)
[ 44.988649][ T5072] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 44.997480][ T5072] BTRFS info (device loop0): doing ref verification
[pid 5072] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5072] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5072] chdir("./bus") = 0
[pid 5072] ioctl(4, LOOP_CLR_FD) = 0
[pid 5072] close(4) = 0
[pid 5072] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5072] fallocate(4, 0, 0, 1048820) = 0
[pid 5072] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5072] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5072] write(6, "12", 2) = 2
[ 45.004094][ T5072] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 45.014941][ T5072] BTRFS info (device loop0): force zlib compression, level 3
[ 45.022449][ T5072] BTRFS info (device loop0): allowing degraded mounts
[ 45.029333][ T5072] BTRFS info (device loop0): using free space tree
[ 45.046859][ T5072] BTRFS info (device loop0): auto enabling async discard
[ 45.081341][ T5072] FAULT_INJECTION: forcing a failure.
[ 45.081341][ T5072] name failslab, interval 1, probability 0, space 0, times 0
[ 45.094495][ T5072] CPU: 0 PID: 5072 Comm: syz-executor267 Not tainted 6.5.0-rc1-syzkaller-00152-g4b810bf037e5 #0
[ 45.104920][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 45.114979][ T5072] Call Trace:
[ 45.118260][ T5072]
[ 45.121193][ T5072] dump_stack_lvl+0x125/0x1b0
[ 45.125941][ T5072] should_fail_ex+0x496/0x5b0
[ 45.130706][ T5072] should_failslab+0x9/0x20
[ 45.135225][ T5072] kmem_cache_alloc+0x33a/0x3b0
[ 45.140095][ T5072] split_extent_map+0x75/0xde0
[ 45.144884][ T5072] btrfs_dio_submit_io+0x408/0x720
[ 45.150016][ T5072] ? btrfs_migrate_folio+0xf0/0xf0
[ 45.155152][ T5072] iomap_dio_submit_bio+0x194/0x210
[ 45.160368][ T5072] iomap_dio_bio_iter+0x7ac/0x1460
[ 45.165510][ T5072] __iomap_dio_rw+0xd10/0x1da0
[ 45.170299][ T5072] ? iomap_dio_bio_end_io+0x600/0x600
[ 45.175689][ T5072] ? inode_maybe_inc_iversion+0x139/0x1a0
[ 45.181429][ T5072] btrfs_dio_write+0xb1/0xe0
[ 45.186019][ T5072] ? btrfs_dio_read+0xe0/0xe0
[ 45.190677][ T5072] ? iov_iter_alignment+0xe1/0x5e0
[ 45.195776][ T5072] btrfs_do_write_iter+0x995/0x11a0
[ 45.200964][ T5072] ? btrfs_fdatawrite_range+0x110/0x110
[ 45.206493][ T5072] do_iter_readv_writev+0x21e/0x3c0
[ 45.211679][ T5072] ? generic_copy_file_range+0x1d0/0x1d0
[ 45.217302][ T5072] ? bpf_lsm_file_permission+0x9/0x10
[ 45.222652][ T5072] ? security_file_permission+0x94/0x100
[ 45.228271][ T5072] do_iter_write+0x17f/0x830
[ 45.232850][ T5072] vfs_writev+0x221/0x700
[ 45.237182][ T5072] ? lock_acquire+0x1ae/0x510
[ 45.241861][ T5072] ? vfs_iter_write+0xb0/0xb0
[ 45.246519][ T5072] ? ptrace_stop.part.0+0x4b4/0x8f0
[ 45.251705][ T5072] ? spin_bug+0x1d0/0x1d0
[ 45.256016][ T5072] ? cgroup_update_frozen+0x144/0x6b0
[ 45.261391][ T5072] ? find_held_lock+0x2d/0x110
[ 45.266158][ T5072] ? do_pwritev+0x1af/0x260
[ 45.270642][ T5072] do_pwritev+0x1af/0x260
[ 45.274972][ T5072] ? do_writev+0x370/0x370
[ 45.279383][ T5072] ? _raw_spin_unlock_irq+0x23/0x50
[ 45.284569][ T5072] ? lockdep_hardirqs_on+0x7d/0x100
[ 45.289753][ T5072] __x64_sys_pwritev2+0xef/0x150
[ 45.294676][ T5072] do_syscall_64+0x38/0xb0
[ 45.299074][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.304954][ T5072] RIP: 0033:0x7f4acf7ef329
[ 45.309350][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 45.328965][ T5072] RSP: 002b:00007ffee9c28988 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 45.337372][ T5072] RAX: ffffffffffffffda RBX: 00007ffee9c289c0 RCX: 00007f4acf7ef329
[ 45.345322][ T5072] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 45.353271][ T5072] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000008
[ 45.361244][ T5072] R10: 0000000000004000 R11: 0000000000000246 R12: 00007ffee9c289bc
[ 45.369206][ T5072] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffee9c28a00
[ 45.377187][ T5072]
[ 45.380584][ T5072] BTRFS warning (device loop0): direct IO failed ino 263 op 0x8801 offset 0x4000 len 4096 err no 9
[ 45.391322][ T5072] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN
[ 45.403032][ T5072] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[ 45.411424][ T5072] CPU: 0 PID: 5072 Comm: syz-executor267 Not tainted 6.5.0-rc1-syzkaller-00152-g4b810bf037e5 #0
[ 45.421832][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 45.431877][ T5072] RIP: 0010:btrfs_finish_ordered_extent+0x3c/0x2a0
[ 45.438397][ T5072] Code: 55 44 89 c5 53 48 89 fb 48 83 ec 08 48 89 34 24 e8 39 d7 0c fe 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 33 02 00 00 4c 8b 6b 60 40 0f b6 ed 0f 1f 44 00
[ 45.458008][ T5072] RSP: 0018:ffffc90003c1f4b8 EFLAGS: 00010216
[ 45.464063][ T5072] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 45.472031][ T5072] RDX: 000000000000000c RSI: ffffffff83799767 RDI: 0000000000000060
[ 45.479990][ T5072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 45.487943][ T5072] R10: 0000000000000009 R11: 0000000000000001 R12: ffff88802999c100
[ 45.495900][ T5072] R13: 0000000000004000 R14: 0000000000004000 R15: 0000000000001000
[ 45.503860][ T5072] FS: 0000555555fee380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 45.512775][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.519359][ T5072] CR2: 00007f4acf86c100 CR3: 0000000023465000 CR4: 0000000000350ef0
[ 45.527325][ T5072] Call Trace:
[ 45.530591][ T5072]
[ 45.533509][ T5072] ? die_addr+0x3b/0xa0
[ 45.537657][ T5072] ? exc_general_protection+0x154/0x230
[ 45.543192][ T5072] ? asm_exc_general_protection+0x26/0x30
[ 45.548925][ T5072] ? btrfs_finish_ordered_extent+0x27/0x2a0
[ 45.554807][ T5072] ? btrfs_finish_ordered_extent+0x3c/0x2a0
[ 45.560710][ T5072] ? btrfs_finish_ordered_extent+0x27/0x2a0
[ 45.566619][ T5072] btrfs_dio_end_io+0x235/0x4b0
[ 45.571470][ T5072] btrfs_dio_submit_io+0x454/0x720
[ 45.576573][ T5072] ? btrfs_migrate_folio+0xf0/0xf0
[ 45.581680][ T5072] iomap_dio_submit_bio+0x194/0x210
[ 45.586937][ T5072] iomap_dio_bio_iter+0x7ac/0x1460
[ 45.592043][ T5072] __iomap_dio_rw+0xd10/0x1da0
[ 45.596800][ T5072] ? iomap_dio_bio_end_io+0x600/0x600
[ 45.602175][ T5072] ? inode_maybe_inc_iversion+0x139/0x1a0
[ 45.607891][ T5072] btrfs_dio_write+0xb1/0xe0
[ 45.612476][ T5072] ? btrfs_dio_read+0xe0/0xe0
[ 45.617147][ T5072] ? iov_iter_alignment+0xe1/0x5e0
[ 45.622260][ T5072] btrfs_do_write_iter+0x995/0x11a0
[ 45.627453][ T5072] ? btrfs_fdatawrite_range+0x110/0x110
[ 45.632991][ T5072] do_iter_readv_writev+0x21e/0x3c0
[ 45.638179][ T5072] ? generic_copy_file_range+0x1d0/0x1d0
[ 45.643804][ T5072] ? bpf_lsm_file_permission+0x9/0x10
[ 45.649174][ T5072] ? security_file_permission+0x94/0x100
[ 45.654821][ T5072] do_iter_write+0x17f/0x830
[ 45.659407][ T5072] vfs_writev+0x221/0x700
[ 45.663734][ T5072] ? lock_acquire+0x1ae/0x510
[ 45.668415][ T5072] ? vfs_iter_write+0xb0/0xb0
[ 45.673083][ T5072] ? ptrace_stop.part.0+0x4b4/0x8f0
[ 45.678268][ T5072] ? spin_bug+0x1d0/0x1d0
[ 45.682591][ T5072] ? cgroup_update_frozen+0x144/0x6b0
[ 45.687964][ T5072] ? find_held_lock+0x2d/0x110
[ 45.692725][ T5072] ? do_pwritev+0x1af/0x260
[ 45.697218][ T5072] do_pwritev+0x1af/0x260
[ 45.701554][ T5072] ? do_writev+0x370/0x370
[ 45.705971][ T5072] ? _raw_spin_unlock_irq+0x23/0x50
[ 45.711162][ T5072] ? lockdep_hardirqs_on+0x7d/0x100
[ 45.716348][ T5072] __x64_sys_pwritev2+0xef/0x150
[ 45.721281][ T5072] do_syscall_64+0x38/0xb0
[ 45.725682][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.731572][ T5072] RIP: 0033:0x7f4acf7ef329
[ 45.735969][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 45.755576][ T5072] RSP: 002b:00007ffee9c28988 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 45.763978][ T5072] RAX: ffffffffffffffda RBX: 00007ffee9c289c0 RCX: 00007f4acf7ef329
[ 45.771934][ T5072] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 45.779889][ T5072] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000008
[ 45.787840][ T5072] R10: 0000000000004000 R11: 0000000000000246 R12: 00007ffee9c289bc
[ 45.795884][ T5072] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffee9c28a00
[ 45.803874][ T5072]
[ 45.806886][ T5072] Modules linked in:
[ 45.811028][ T5072] ---[ end trace 0000000000000000 ]---
[ 45.816534][ T5072] RIP: 0010:btrfs_finish_ordered_extent+0x3c/0x2a0
[ 45.823125][ T5072] Code: 55 44 89 c5 53 48 89 fb 48 83 ec 08 48 89 34 24 e8 39 d7 0c fe 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 33 02 00 00 4c 8b 6b 60 40 0f b6 ed 0f 1f 44 00
[ 45.842959][ T5072] RSP: 0018:ffffc90003c1f4b8 EFLAGS: 00010216
[ 45.849102][ T5072] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 45.857089][ T5072] RDX: 000000000000000c RSI: ffffffff83799767 RDI: 0000000000000060
[ 45.865055][ T5072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 45.873057][ T5072] R10: 0000000000000009 R11: 0000000000000001 R12: ffff88802999c100
[ 45.881040][ T5072] R13: 0000000000004000 R14: 0000000000004000 R15: 0000000000001000
[ 45.889089][ T5072] FS: 0000555555fee380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 45.898135][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.904754][ T5072] CR2: 00007f4acf86c100 CR3: 0000000023465000 CR4: 0000000000350ef0
[ 45.912778][ T5072] Kernel panic - not syncing: Fatal exception
[ 45.919679][ T5072] Kernel Offset: disabled
[ 45.923985][ T5072] Rebooting in 86400 seconds..