./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2469541533

<...>
Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts.
execve("./syz-executor2469541533", ["./syz-executor2469541533"], 0x7ffdfc4db350 /* 10 vars */) = 0
brk(NULL)                               = 0x55555666e000
brk(0x55555666ed00)                     = 0x55555666ed00
arch_prctl(ARCH_SET_FS, 0x55555666e380) = 0
set_tid_address(0x55555666e650)         = 5058
set_robust_list(0x55555666e660, 24)     = 0
rseq(0x55555666eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2469541533", 4096) = 28
getrandom("\x7d\x24\x96\x09\x5a\x86\xe7\x83", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555666ed00
brk(0x55555668fd00)                     = 0x55555668fd00
brk(0x555556690000)                     = 0x555556690000
mprotect(0x7f87485e9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555666e650) = 5059
./strace-static-x86_64: Process 5059 attached
[pid  5059] set_robust_list(0x55555666e660, 24) = 0
[pid  5059] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5059] setsid()                    = 1
[pid  5059] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5059] unshare(CLONE_NEWNS)        = 0
[pid  5059] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5059] unshare(CLONE_NEWIPC)       = 0
[pid  5059] unshare(CLONE_NEWCGROUP)    = 0
[pid  5059] unshare(CLONE_NEWUTS)       = 0
[pid  5059] unshare(CLONE_SYSVSEM)      = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "16777216", 8)     = 8
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "536870912", 9)    = 9
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "8192", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5059] close(3)                    = 0
[pid  5059] getpid()                    = 1
[pid  5059] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5059] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5059] unshare(CLONE_NEWNET)       = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "0 65535", 7)      = 7
[pid  5059] close(3)                    = 0
[pid  5059] mkdir("/dev/binderfs", 0777) = 0
[pid  5059] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5059] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5059] memfd_create("syzkaller", 0) = 3
[pid  5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8740132000
[pid  5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5059] munmap(0x7f8740132000, 138412032) = 0
[pid  5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5059] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5059] close(3)                    = 0
[pid  5059] mkdir("./file0", 0777)      = 0
[   57.976537][ T5059] loop0: detected capacity change from 0 to 32768
[   58.008242][ T5059] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor246 (5059)
[   58.027897][ T5059] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   58.038135][ T5059] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   58.047398][ T5059] BTRFS info (device loop0): force clearing of disk cache
[   58.054553][ T5059] BTRFS info (device loop0): setting nodatasum
[   58.060692][ T5059] BTRFS info (device loop0): allowing degraded mounts
[   58.067507][ T5059] BTRFS info (device loop0): enabling disk space caching
[   58.074556][ T5059] BTRFS info (device loop0): disk space caching is enabled
[   58.097074][ T5059] BTRFS info (device loop0): enabling ssd optimizations
[   58.104184][ T5059] BTRFS info (device loop0): auto enabling async discard
[   58.112852][ T5059] BTRFS info (device loop0): rebuilding free space tree
[pid  5059] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0
[pid  5059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5059] chdir("./file0")            = 0
[pid  5059] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5059] close(4)                    = 0
[   58.132896][ T5059] BTRFS info (device loop0): disabling free space tree
[   58.139900][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   58.149705][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   58.163572][ T5059] BTRFS info (device loop0): checking UUID tree
[pid  5059] openat(AT_FDCWD, "blkio.bfq.time_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  5059] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=0x4 /* BTRFS_QUOTA_CTL_??? */}) = 0
[pid  5059] write(4, "\x2a\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00", 42) = 42
[pid  5059] open("./file0", O_RDONLY)   = 5
[pid  5059] ioctl(5, BTRFS_IOC_QGROUP_CREATE, {create=0, qgroupid=5}) = 0
[   58.235347][ T5059] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[pid  5059] exit_group(1)               = ?
[   58.330413][ T5059] ------------[ cut here ]------------
[   58.336846][ T5059] BTRFS: Transaction aborted (error -2)
[   58.343139][ T5059] WARNING: CPU: 1 PID: 5059 at fs/btrfs/extent-tree.c:2983 __btrfs_free_extent+0x31bc/0x38e0
[   58.353481][ T5059] Modules linked in:
[   58.357420][ T5059] CPU: 1 PID: 5059 Comm: syz-executor246 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[   58.367878][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[   58.377960][ T5059] RIP: 0010:__btrfs_free_extent+0x31bc/0x38e0
[   58.384065][ T5059] Code: aa 8b 44 89 ee e8 04 dd c3 fd 90 0f 0b 90 90 e9 57 f3 ff ff e8 35 ff fd fd 90 48 c7 c7 60 b5 aa 8b 44 89 ee e8 e5 dc c3 fd 90 <0f> 0b 90 90 e9 65 f3 ff ff e8 16 ff fd fd 90 48 c7 c7 60 b5 aa 8b
[   58.403721][ T5059] RSP: 0018:ffffc900043e7120 EFLAGS: 00010246
[   58.409810][ T5059] RAX: ee8bdaa2c5ed0400 RBX: ffff88807a124001 RCX: ffff88807eb3bb80
[   58.417814][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   58.425812][ T5059] RBP: ffffc900043e7320 R08: ffffffff81545a92 R09: 1ffff11017325172
[   58.433827][ T5059] R10: dffffc0000000000 R11: ffffed1017325173 R12: dffffc0000000000
[   58.441800][ T5059] R13: 00000000fffffffe R14: 0000000000000000 R15: ffff88807e64f4a0
[   58.449815][ T5059] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   58.458771][ T5059] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.465400][ T5059] CR2: 00007f87485b8eb8 CR3: 0000000075dc3000 CR4: 00000000003506f0
[   58.473385][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   58.481392][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.489386][ T5059] Call Trace:
[   58.492648][ T5059]  <TASK>
[   58.495604][ T5059]  ? __warn+0x162/0x4b0
[   58.499769][ T5059]  ? __btrfs_free_extent+0x31bc/0x38e0
[   58.505272][ T5059]  ? report_bug+0x2b3/0x500
[   58.509796][ T5059]  ? __btrfs_free_extent+0x31bc/0x38e0
[   58.515299][ T5059]  ? handle_bug+0x3e/0x60
[   58.519639][ T5059]  ? exc_invalid_op+0x1a/0x50
[   58.524365][ T5059]  ? asm_exc_invalid_op+0x1a/0x20
[   58.529397][ T5059]  ? __warn_printk+0x292/0x360
[   58.534196][ T5059]  ? __btrfs_free_extent+0x31bc/0x38e0
[   58.539674][ T5059]  ? __btrfs_inc_extent_ref+0x610/0x610
[   58.545265][ T5059]  ? lock_downgrade+0x840/0x8f0
[   58.550123][ T5059]  ? __btrfs_run_delayed_refs+0xa94/0x44d0
[   58.555966][ T5059]  ? __lock_acquire+0x1fd0/0x1fd0
[   58.561002][ T5059]  ? do_raw_spin_unlock+0x13b/0x8b0
[   58.566245][ T5059]  __btrfs_run_delayed_refs+0x13c8/0x44d0
[   58.572002][ T5059]  ? mark_lock+0x9a/0x350
[   58.576360][ T5059]  ? btrfs_run_delayed_refs+0x2c0/0x2c0
[   58.581920][ T5059]  ? __lock_acquire+0x1345/0x1fd0
[   58.587022][ T5059]  ? __stack_depot_save+0x4dc/0x650
[   58.592246][ T5059]  ? read_lock_is_recursive+0x20/0x20
[   58.597672][ T5059]  ? __lock_acquire+0x1345/0x1fd0
[   58.602708][ T5059]  btrfs_run_delayed_refs+0xe3/0x2c0
[   58.608034][ T5059]  btrfs_commit_transaction+0x4ba/0x3740
[   58.613733][ T5059]  ? btrfs_commit_transaction+0x17b/0x3740
[   58.619541][ T5059]  ? __asan_memset+0x23/0x40
[   58.624167][ T5059]  ? lockdep_init_map_type+0xa1/0x900
[   58.629549][ T5059]  ? btrfs_commit_transaction_async+0x480/0x480
[   58.635830][ T5059]  ? join_transaction+0x401/0xcf0
[   58.640866][ T5059]  ? btrfs_record_root_in_trans+0x92/0x180
[   58.646708][ T5059]  ? start_transaction+0x3dc/0x1780
[   58.651928][ T5059]  ? btrfs_attach_transaction_barrier+0x34/0xa0
[   58.658213][ T5059]  ? btrfs_sync_fs+0x1be/0x6d0
[   58.662984][ T5059]  sync_filesystem+0x1c0/0x220
[   58.667782][ T5059]  generic_shutdown_super+0x72/0x2c0
[   58.673076][ T5059]  kill_anon_super+0x3b/0x70
[   58.677691][ T5059]  btrfs_kill_super+0x41/0x50
[   58.682377][ T5059]  deactivate_locked_super+0xc1/0x130
[   58.687791][ T5059]  cleanup_mnt+0x426/0x4c0
[   58.692210][ T5059]  ? _raw_spin_unlock_irq+0x23/0x50
[   58.697459][ T5059]  task_work_run+0x24a/0x300
[   58.702067][ T5059]  ? kasan_quarantine_put+0xd8/0x230
[   58.707396][ T5059]  ? task_work_cancel+0x2b0/0x2b0
[   58.712426][ T5059]  ? kmem_cache_free+0x299/0x470
[   58.717394][ T5059]  ? do_exit+0xa2f/0x2750
[   58.721736][ T5059]  do_exit+0xa34/0x2750
[   58.725937][ T5059]  ? put_task_struct+0xb0/0xb0
[   58.730715][ T5059]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[   58.736726][ T5059]  ? print_irqtrace_events+0x220/0x220
[   58.742193][ T5059]  ? _raw_spin_unlock_irq+0x23/0x50
[   58.747426][ T5059]  ? lockdep_hardirqs_on+0x98/0x140
[   58.752632][ T5059]  do_group_exit+0x206/0x2c0
[   58.757256][ T5059]  __x64_sys_exit_group+0x3f/0x40
[   58.762290][ T5059]  do_syscall_64+0x45/0x110
[   58.766841][ T5059]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   58.772748][ T5059] RIP: 0033:0x7f874856e949
[   58.777191][ T5059] Code: Unable to access opcode bytes at 0x7f874856e91f.
[   58.784248][ T5059] RSP: 002b:00007ffe659a0d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   58.792656][ T5059] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f874856e949
[   58.800645][ T5059] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   58.808670][ T5059] RBP: 00007f87485ef2d0 R08: ffffffffffffffb8 R09: 00007ffe659a0df0
[   58.816685][ T5059] R10: 00007ffe659a0df0 R11: 0000000000000246 R12: 00007f87485ef2d0
[   58.824761][ T5059] R13: 0000000000000000 R14: 00007f87485f0040 R15: 00007f874853ce90
[   58.832746][ T5059]  </TASK>
[   58.835806][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   58.843084][ T5059] CPU: 1 PID: 5059 Comm: syz-executor246 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[   58.853495][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[   58.863532][ T5059] Call Trace:
[   58.866796][ T5059]  <TASK>
[   58.869735][ T5059]  dump_stack_lvl+0x1e7/0x2d0
[   58.874403][ T5059]  ? nf_tcp_handle_invalid+0x650/0x650
[   58.879845][ T5059]  ? panic+0x850/0x850
[   58.883904][ T5059]  ? vscnprintf+0x5d/0x80
[   58.888216][ T5059]  panic+0x349/0x850
[   58.892090][ T5059]  ? __warn+0x171/0x4b0
[   58.896227][ T5059]  ? __memcpy_flushcache+0x2b0/0x2b0
[   58.901501][ T5059]  __warn+0x318/0x4b0
[   58.905469][ T5059]  ? __btrfs_free_extent+0x31bc/0x38e0
[   58.910911][ T5059]  report_bug+0x2b3/0x500
[   58.915229][ T5059]  ? __btrfs_free_extent+0x31bc/0x38e0
[   58.920669][ T5059]  handle_bug+0x3e/0x60
[   58.924811][ T5059]  exc_invalid_op+0x1a/0x50
[   58.929299][ T5059]  asm_exc_invalid_op+0x1a/0x20
[   58.934134][ T5059] RIP: 0010:__btrfs_free_extent+0x31bc/0x38e0
[   58.940192][ T5059] Code: aa 8b 44 89 ee e8 04 dd c3 fd 90 0f 0b 90 90 e9 57 f3 ff ff e8 35 ff fd fd 90 48 c7 c7 60 b5 aa 8b 44 89 ee e8 e5 dc c3 fd 90 <0f> 0b 90 90 e9 65 f3 ff ff e8 16 ff fd fd 90 48 c7 c7 60 b5 aa 8b
[   58.959790][ T5059] RSP: 0018:ffffc900043e7120 EFLAGS: 00010246
[   58.965850][ T5059] RAX: ee8bdaa2c5ed0400 RBX: ffff88807a124001 RCX: ffff88807eb3bb80
[   58.973814][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   58.981772][ T5059] RBP: ffffc900043e7320 R08: ffffffff81545a92 R09: 1ffff11017325172
[   58.989733][ T5059] R10: dffffc0000000000 R11: ffffed1017325173 R12: dffffc0000000000
[   58.997694][ T5059] R13: 00000000fffffffe R14: 0000000000000000 R15: ffff88807e64f4a0
[   59.006099][ T5059]  ? __warn_printk+0x292/0x360
[   59.010880][ T5059]  ? __btrfs_inc_extent_ref+0x610/0x610
[   59.016417][ T5059]  ? lock_downgrade+0x840/0x8f0
[   59.021260][ T5059]  ? __btrfs_run_delayed_refs+0xa94/0x44d0
[   59.027063][ T5059]  ? __lock_acquire+0x1fd0/0x1fd0
[   59.032087][ T5059]  ? do_raw_spin_unlock+0x13b/0x8b0
[   59.037288][ T5059]  __btrfs_run_delayed_refs+0x13c8/0x44d0
[   59.043065][ T5059]  ? mark_lock+0x9a/0x350
[   59.047403][ T5059]  ? btrfs_run_delayed_refs+0x2c0/0x2c0
[   59.052952][ T5059]  ? __lock_acquire+0x1345/0x1fd0
[   59.057997][ T5059]  ? __stack_depot_save+0x4dc/0x650
[   59.063197][ T5059]  ? read_lock_is_recursive+0x20/0x20
[   59.068573][ T5059]  ? __lock_acquire+0x1345/0x1fd0
[   59.073621][ T5059]  btrfs_run_delayed_refs+0xe3/0x2c0
[   59.078925][ T5059]  btrfs_commit_transaction+0x4ba/0x3740
[   59.084568][ T5059]  ? btrfs_commit_transaction+0x17b/0x3740
[   59.090380][ T5059]  ? __asan_memset+0x23/0x40
[   59.094969][ T5059]  ? lockdep_init_map_type+0xa1/0x900
[   59.100397][ T5059]  ? btrfs_commit_transaction_async+0x480/0x480
[   59.106681][ T5059]  ? join_transaction+0x401/0xcf0
[   59.111716][ T5059]  ? btrfs_record_root_in_trans+0x92/0x180
[   59.117539][ T5059]  ? start_transaction+0x3dc/0x1780
[   59.122754][ T5059]  ? btrfs_attach_transaction_barrier+0x34/0xa0
[   59.129006][ T5059]  ? btrfs_sync_fs+0x1be/0x6d0
[   59.133773][ T5059]  sync_filesystem+0x1c0/0x220
[   59.138536][ T5059]  generic_shutdown_super+0x72/0x2c0
[   59.143824][ T5059]  kill_anon_super+0x3b/0x70
[   59.148410][ T5059]  btrfs_kill_super+0x41/0x50
[   59.153083][ T5059]  deactivate_locked_super+0xc1/0x130
[   59.158451][ T5059]  cleanup_mnt+0x426/0x4c0
[   59.162861][ T5059]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.168058][ T5059]  task_work_run+0x24a/0x300
[   59.172644][ T5059]  ? kasan_quarantine_put+0xd8/0x230
[   59.177925][ T5059]  ? task_work_cancel+0x2b0/0x2b0
[   59.182948][ T5059]  ? kmem_cache_free+0x299/0x470
[   59.187882][ T5059]  ? do_exit+0xa2f/0x2750
[   59.192213][ T5059]  do_exit+0xa34/0x2750
[   59.196369][ T5059]  ? put_task_struct+0xb0/0xb0
[   59.201129][ T5059]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[   59.207107][ T5059]  ? print_irqtrace_events+0x220/0x220
[   59.212564][ T5059]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.217753][ T5059]  ? lockdep_hardirqs_on+0x98/0x140
[   59.222945][ T5059]  do_group_exit+0x206/0x2c0
[   59.227537][ T5059]  __x64_sys_exit_group+0x3f/0x40
[   59.232578][ T5059]  do_syscall_64+0x45/0x110
[   59.237108][ T5059]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   59.243023][ T5059] RIP: 0033:0x7f874856e949
[   59.247436][ T5059] Code: Unable to access opcode bytes at 0x7f874856e91f.
[   59.254441][ T5059] RSP: 002b:00007ffe659a0d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   59.262851][ T5059] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f874856e949
[   59.270816][ T5059] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   59.278778][ T5059] RBP: 00007f87485ef2d0 R08: ffffffffffffffb8 R09: 00007ffe659a0df0
[   59.286744][ T5059] R10: 00007ffe659a0df0 R11: 0000000000000246 R12: 00007f87485ef2d0
[   59.294705][ T5059] R13: 0000000000000000 R14: 00007f87485f0040 R15: 00007f874853ce90
[   59.302682][ T5059]  </TASK>
[   59.305866][ T5059] Kernel Offset: disabled
[   59.310270][ T5059] Rebooting in 86400 seconds..