./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2469541533
<...>
Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts.
execve("./syz-executor2469541533", ["./syz-executor2469541533"], 0x7ffdfc4db350 /* 10 vars */) = 0
brk(NULL) = 0x55555666e000
brk(0x55555666ed00) = 0x55555666ed00
arch_prctl(ARCH_SET_FS, 0x55555666e380) = 0
set_tid_address(0x55555666e650) = 5058
set_robust_list(0x55555666e660, 24) = 0
rseq(0x55555666eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2469541533", 4096) = 28
getrandom("\x7d\x24\x96\x09\x5a\x86\xe7\x83", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555666ed00
brk(0x55555668fd00) = 0x55555668fd00
brk(0x555556690000) = 0x555556690000
mprotect(0x7f87485e9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555666e650) = 5059
./strace-static-x86_64: Process 5059 attached
[pid 5059] set_robust_list(0x55555666e660, 24) = 0
[pid 5059] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5059] setsid() = 1
[pid 5059] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid 5059] unshare(CLONE_NEWNS) = 0
[pid 5059] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid 5059] unshare(CLONE_NEWIPC) = 0
[pid 5059] unshare(CLONE_NEWCGROUP) = 0
[pid 5059] unshare(CLONE_NEWUTS) = 0
[pid 5059] unshare(CLONE_SYSVSEM) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "16777216", 8) = 8
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "536870912", 9) = 9
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "8192", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024 1048576 500 1024", 21) = 21
[pid 5059] close(3) = 0
[pid 5059] getpid() = 1
[pid 5059] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 5059] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 5059] unshare(CLONE_NEWNET) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "0 65535", 7) = 7
[pid 5059] close(3) = 0
[pid 5059] mkdir("/dev/binderfs", 0777) = 0
[pid 5059] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid 5059] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5059] memfd_create("syzkaller", 0) = 3
[pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8740132000
[pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5059] munmap(0x7f8740132000, 138412032) = 0
[pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5059] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5059] close(3) = 0
[pid 5059] mkdir("./file0", 0777) = 0
[ 57.976537][ T5059] loop0: detected capacity change from 0 to 32768
[ 58.008242][ T5059] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor246 (5059)
[ 58.027897][ T5059] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 58.038135][ T5059] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 58.047398][ T5059] BTRFS info (device loop0): force clearing of disk cache
[ 58.054553][ T5059] BTRFS info (device loop0): setting nodatasum
[ 58.060692][ T5059] BTRFS info (device loop0): allowing degraded mounts
[ 58.067507][ T5059] BTRFS info (device loop0): enabling disk space caching
[ 58.074556][ T5059] BTRFS info (device loop0): disk space caching is enabled
[ 58.097074][ T5059] BTRFS info (device loop0): enabling ssd optimizations
[ 58.104184][ T5059] BTRFS info (device loop0): auto enabling async discard
[ 58.112852][ T5059] BTRFS info (device loop0): rebuilding free space tree
[pid 5059] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0
[pid 5059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5059] chdir("./file0") = 0
[pid 5059] ioctl(4, LOOP_CLR_FD) = 0
[pid 5059] close(4) = 0
[ 58.132896][ T5059] BTRFS info (device loop0): disabling free space tree
[ 58.139900][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 58.149705][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 58.163572][ T5059] BTRFS info (device loop0): checking UUID tree
[pid 5059] openat(AT_FDCWD, "blkio.bfq.time_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid 5059] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=0x4 /* BTRFS_QUOTA_CTL_??? */}) = 0
[pid 5059] write(4, "\x2a\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00", 42) = 42
[pid 5059] open("./file0", O_RDONLY) = 5
[pid 5059] ioctl(5, BTRFS_IOC_QGROUP_CREATE, {create=0, qgroupid=5}) = 0
[ 58.235347][ T5059] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[pid 5059] exit_group(1) = ?
[ 58.330413][ T5059] ------------[ cut here ]------------
[ 58.336846][ T5059] BTRFS: Transaction aborted (error -2)
[ 58.343139][ T5059] WARNING: CPU: 1 PID: 5059 at fs/btrfs/extent-tree.c:2983 __btrfs_free_extent+0x31bc/0x38e0
[ 58.353481][ T5059] Modules linked in:
[ 58.357420][ T5059] CPU: 1 PID: 5059 Comm: syz-executor246 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 58.367878][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 58.377960][ T5059] RIP: 0010:__btrfs_free_extent+0x31bc/0x38e0
[ 58.384065][ T5059] Code: aa 8b 44 89 ee e8 04 dd c3 fd 90 0f 0b 90 90 e9 57 f3 ff ff e8 35 ff fd fd 90 48 c7 c7 60 b5 aa 8b 44 89 ee e8 e5 dc c3 fd 90 <0f> 0b 90 90 e9 65 f3 ff ff e8 16 ff fd fd 90 48 c7 c7 60 b5 aa 8b
[ 58.403721][ T5059] RSP: 0018:ffffc900043e7120 EFLAGS: 00010246
[ 58.409810][ T5059] RAX: ee8bdaa2c5ed0400 RBX: ffff88807a124001 RCX: ffff88807eb3bb80
[ 58.417814][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 58.425812][ T5059] RBP: ffffc900043e7320 R08: ffffffff81545a92 R09: 1ffff11017325172
[ 58.433827][ T5059] R10: dffffc0000000000 R11: ffffed1017325173 R12: dffffc0000000000
[ 58.441800][ T5059] R13: 00000000fffffffe R14: 0000000000000000 R15: ffff88807e64f4a0
[ 58.449815][ T5059] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 58.458771][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.465400][ T5059] CR2: 00007f87485b8eb8 CR3: 0000000075dc3000 CR4: 00000000003506f0
[ 58.473385][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.481392][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.489386][ T5059] Call Trace:
[ 58.492648][ T5059] <TASK>
[ 58.495604][ T5059] ? __warn+0x162/0x4b0
[ 58.499769][ T5059] ? __btrfs_free_extent+0x31bc/0x38e0
[ 58.505272][ T5059] ? report_bug+0x2b3/0x500
[ 58.509796][ T5059] ? __btrfs_free_extent+0x31bc/0x38e0
[ 58.515299][ T5059] ? handle_bug+0x3e/0x60
[ 58.519639][ T5059] ? exc_invalid_op+0x1a/0x50
[ 58.524365][ T5059] ? asm_exc_invalid_op+0x1a/0x20
[ 58.529397][ T5059] ? __warn_printk+0x292/0x360
[ 58.534196][ T5059] ? __btrfs_free_extent+0x31bc/0x38e0
[ 58.539674][ T5059] ? __btrfs_inc_extent_ref+0x610/0x610
[ 58.545265][ T5059] ? lock_downgrade+0x840/0x8f0
[ 58.550123][ T5059] ? __btrfs_run_delayed_refs+0xa94/0x44d0
[ 58.555966][ T5059] ? __lock_acquire+0x1fd0/0x1fd0
[ 58.561002][ T5059] ? do_raw_spin_unlock+0x13b/0x8b0
[ 58.566245][ T5059] __btrfs_run_delayed_refs+0x13c8/0x44d0
[ 58.572002][ T5059] ? mark_lock+0x9a/0x350
[ 58.576360][ T5059] ? btrfs_run_delayed_refs+0x2c0/0x2c0
[ 58.581920][ T5059] ? __lock_acquire+0x1345/0x1fd0
[ 58.587022][ T5059] ? __stack_depot_save+0x4dc/0x650
[ 58.592246][ T5059] ? read_lock_is_recursive+0x20/0x20
[ 58.597672][ T5059] ? __lock_acquire+0x1345/0x1fd0
[ 58.602708][ T5059] btrfs_run_delayed_refs+0xe3/0x2c0
[ 58.608034][ T5059] btrfs_commit_transaction+0x4ba/0x3740
[ 58.613733][ T5059] ? btrfs_commit_transaction+0x17b/0x3740
[ 58.619541][ T5059] ? __asan_memset+0x23/0x40
[ 58.624167][ T5059] ? lockdep_init_map_type+0xa1/0x900
[ 58.629549][ T5059] ? btrfs_commit_transaction_async+0x480/0x480
[ 58.635830][ T5059] ? join_transaction+0x401/0xcf0
[ 58.640866][ T5059] ? btrfs_record_root_in_trans+0x92/0x180
[ 58.646708][ T5059] ? start_transaction+0x3dc/0x1780
[ 58.651928][ T5059] ? btrfs_attach_transaction_barrier+0x34/0xa0
[ 58.658213][ T5059] ? btrfs_sync_fs+0x1be/0x6d0
[ 58.662984][ T5059] sync_filesystem+0x1c0/0x220
[ 58.667782][ T5059] generic_shutdown_super+0x72/0x2c0
[ 58.673076][ T5059] kill_anon_super+0x3b/0x70
[ 58.677691][ T5059] btrfs_kill_super+0x41/0x50
[ 58.682377][ T5059] deactivate_locked_super+0xc1/0x130
[ 58.687791][ T5059] cleanup_mnt+0x426/0x4c0
[ 58.692210][ T5059] ? _raw_spin_unlock_irq+0x23/0x50
[ 58.697459][ T5059] task_work_run+0x24a/0x300
[ 58.702067][ T5059] ? kasan_quarantine_put+0xd8/0x230
[ 58.707396][ T5059] ? task_work_cancel+0x2b0/0x2b0
[ 58.712426][ T5059] ? kmem_cache_free+0x299/0x470
[ 58.717394][ T5059] ? do_exit+0xa2f/0x2750
[ 58.721736][ T5059] do_exit+0xa34/0x2750
[ 58.725937][ T5059] ? put_task_struct+0xb0/0xb0
[ 58.730715][ T5059] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 58.736726][ T5059] ? print_irqtrace_events+0x220/0x220
[ 58.742193][ T5059] ? _raw_spin_unlock_irq+0x23/0x50
[ 58.747426][ T5059] ? lockdep_hardirqs_on+0x98/0x140
[ 58.752632][ T5059] do_group_exit+0x206/0x2c0
[ 58.757256][ T5059] __x64_sys_exit_group+0x3f/0x40
[ 58.762290][ T5059] do_syscall_64+0x45/0x110
[ 58.766841][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 58.772748][ T5059] RIP: 0033:0x7f874856e949
[ 58.777191][ T5059] Code: Unable to access opcode bytes at 0x7f874856e91f.
[ 58.784248][ T5059] RSP: 002b:00007ffe659a0d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 58.792656][ T5059] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f874856e949
[ 58.800645][ T5059] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 58.808670][ T5059] RBP: 00007f87485ef2d0 R08: ffffffffffffffb8 R09: 00007ffe659a0df0
[ 58.816685][ T5059] R10: 00007ffe659a0df0 R11: 0000000000000246 R12: 00007f87485ef2d0
[ 58.824761][ T5059] R13: 0000000000000000 R14: 00007f87485f0040 R15: 00007f874853ce90
[ 58.832746][ T5059] </TASK>
[ 58.835806][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 58.843084][ T5059] CPU: 1 PID: 5059 Comm: syz-executor246 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 58.853495][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 58.863532][ T5059] Call Trace:
[ 58.866796][ T5059] <TASK>
[ 58.869735][ T5059] dump_stack_lvl+0x1e7/0x2d0
[ 58.874403][ T5059] ? nf_tcp_handle_invalid+0x650/0x650
[ 58.879845][ T5059] ? panic+0x850/0x850
[ 58.883904][ T5059] ? vscnprintf+0x5d/0x80
[ 58.888216][ T5059] panic+0x349/0x850
[ 58.892090][ T5059] ? __warn+0x171/0x4b0
[ 58.896227][ T5059] ? __memcpy_flushcache+0x2b0/0x2b0
[ 58.901501][ T5059] __warn+0x318/0x4b0
[ 58.905469][ T5059] ? __btrfs_free_extent+0x31bc/0x38e0
[ 58.910911][ T5059] report_bug+0x2b3/0x500
[ 58.915229][ T5059] ? __btrfs_free_extent+0x31bc/0x38e0
[ 58.920669][ T5059] handle_bug+0x3e/0x60
[ 58.924811][ T5059] exc_invalid_op+0x1a/0x50
[ 58.929299][ T5059] asm_exc_invalid_op+0x1a/0x20
[ 58.934134][ T5059] RIP: 0010:__btrfs_free_extent+0x31bc/0x38e0
[ 58.940192][ T5059] Code: aa 8b 44 89 ee e8 04 dd c3 fd 90 0f 0b 90 90 e9 57 f3 ff ff e8 35 ff fd fd 90 48 c7 c7 60 b5 aa 8b 44 89 ee e8 e5 dc c3 fd 90 <0f> 0b 90 90 e9 65 f3 ff ff e8 16 ff fd fd 90 48 c7 c7 60 b5 aa 8b
[ 58.959790][ T5059] RSP: 0018:ffffc900043e7120 EFLAGS: 00010246
[ 58.965850][ T5059] RAX: ee8bdaa2c5ed0400 RBX: ffff88807a124001 RCX: ffff88807eb3bb80
[ 58.973814][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 58.981772][ T5059] RBP: ffffc900043e7320 R08: ffffffff81545a92 R09: 1ffff11017325172
[ 58.989733][ T5059] R10: dffffc0000000000 R11: ffffed1017325173 R12: dffffc0000000000
[ 58.997694][ T5059] R13: 00000000fffffffe R14: 0000000000000000 R15: ffff88807e64f4a0
[ 59.006099][ T5059] ? __warn_printk+0x292/0x360
[ 59.010880][ T5059] ? __btrfs_inc_extent_ref+0x610/0x610
[ 59.016417][ T5059] ? lock_downgrade+0x840/0x8f0
[ 59.021260][ T5059] ? __btrfs_run_delayed_refs+0xa94/0x44d0
[ 59.027063][ T5059] ? __lock_acquire+0x1fd0/0x1fd0
[ 59.032087][ T5059] ? do_raw_spin_unlock+0x13b/0x8b0
[ 59.037288][ T5059] __btrfs_run_delayed_refs+0x13c8/0x44d0
[ 59.043065][ T5059] ? mark_lock+0x9a/0x350
[ 59.047403][ T5059] ? btrfs_run_delayed_refs+0x2c0/0x2c0
[ 59.052952][ T5059] ? __lock_acquire+0x1345/0x1fd0
[ 59.057997][ T5059] ? __stack_depot_save+0x4dc/0x650
[ 59.063197][ T5059] ? read_lock_is_recursive+0x20/0x20
[ 59.068573][ T5059] ? __lock_acquire+0x1345/0x1fd0
[ 59.073621][ T5059] btrfs_run_delayed_refs+0xe3/0x2c0
[ 59.078925][ T5059] btrfs_commit_transaction+0x4ba/0x3740
[ 59.084568][ T5059] ? btrfs_commit_transaction+0x17b/0x3740
[ 59.090380][ T5059] ? __asan_memset+0x23/0x40
[ 59.094969][ T5059] ? lockdep_init_map_type+0xa1/0x900
[ 59.100397][ T5059] ? btrfs_commit_transaction_async+0x480/0x480
[ 59.106681][ T5059] ? join_transaction+0x401/0xcf0
[ 59.111716][ T5059] ? btrfs_record_root_in_trans+0x92/0x180
[ 59.117539][ T5059] ? start_transaction+0x3dc/0x1780
[ 59.122754][ T5059] ? btrfs_attach_transaction_barrier+0x34/0xa0
[ 59.129006][ T5059] ? btrfs_sync_fs+0x1be/0x6d0
[ 59.133773][ T5059] sync_filesystem+0x1c0/0x220
[ 59.138536][ T5059] generic_shutdown_super+0x72/0x2c0
[ 59.143824][ T5059] kill_anon_super+0x3b/0x70
[ 59.148410][ T5059] btrfs_kill_super+0x41/0x50
[ 59.153083][ T5059] deactivate_locked_super+0xc1/0x130
[ 59.158451][ T5059] cleanup_mnt+0x426/0x4c0
[ 59.162861][ T5059] ? _raw_spin_unlock_irq+0x23/0x50
[ 59.168058][ T5059] task_work_run+0x24a/0x300
[ 59.172644][ T5059] ? kasan_quarantine_put+0xd8/0x230
[ 59.177925][ T5059] ? task_work_cancel+0x2b0/0x2b0
[ 59.182948][ T5059] ? kmem_cache_free+0x299/0x470
[ 59.187882][ T5059] ? do_exit+0xa2f/0x2750
[ 59.192213][ T5059] do_exit+0xa34/0x2750
[ 59.196369][ T5059] ? put_task_struct+0xb0/0xb0
[ 59.201129][ T5059] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 59.207107][ T5059] ? print_irqtrace_events+0x220/0x220
[ 59.212564][ T5059] ? _raw_spin_unlock_irq+0x23/0x50
[ 59.217753][ T5059] ? lockdep_hardirqs_on+0x98/0x140
[ 59.222945][ T5059] do_group_exit+0x206/0x2c0
[ 59.227537][ T5059] __x64_sys_exit_group+0x3f/0x40
[ 59.232578][ T5059] do_syscall_64+0x45/0x110
[ 59.237108][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 59.243023][ T5059] RIP: 0033:0x7f874856e949
[ 59.247436][ T5059] Code: Unable to access opcode bytes at 0x7f874856e91f.
[ 59.254441][ T5059] RSP: 002b:00007ffe659a0d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 59.262851][ T5059] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f874856e949
[ 59.270816][ T5059] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 59.278778][ T5059] RBP: 00007f87485ef2d0 R08: ffffffffffffffb8 R09: 00007ffe659a0df0
[ 59.286744][ T5059] R10: 00007ffe659a0df0 R11: 0000000000000246 R12: 00007f87485ef2d0
[ 59.294705][ T5059] R13: 0000000000000000 R14: 00007f87485f0040 R15: 00007f874853ce90
[ 59.302682][ T5059] </TASK>
[ 59.305866][ T5059] Kernel Offset: disabled
[ 59.310270][ T5059] Rebooting in 86400 seconds..