./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor815198623

<...>
Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts.
execve("./syz-executor815198623", ["./syz-executor815198623"], 0x7ffcf5f06df0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555559db000
brk(0x5555559dbd40)                     = 0x5555559dbd40
arch_prctl(ARCH_SET_FS, 0x5555559db3c0) = 0
set_tid_address(0x5555559db690)         = 5013
set_robust_list(0x5555559db6a0, 24)     = 0
rseq(0x5555559dbce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor815198623", 4096) = 27
getrandom("\xb9\x7f\x4b\x76\x24\xdc\x1a\x83", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555559dbd40
brk(0x5555559fcd40)                     = 0x5555559fcd40
brk(0x5555559fd000)                     = 0x5555559fd000
mprotect(0x7f8dd834e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559db690) = 5014
./strace-static-x86_64: Process 5014 attached
[pid  5014] set_robust_list(0x5555559db6a0, 24) = 0
[pid  5014] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5014] setsid()                    = 1
[pid  5014] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5014] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5014] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5014] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5014] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5014] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5014] unshare(CLONE_NEWNS)        = 0
[pid  5014] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5014] unshare(CLONE_NEWIPC)       = 0
[pid  5014] unshare(CLONE_NEWCGROUP)    = 0
[pid  5014] unshare(CLONE_NEWUTS)       = 0
[pid  5014] unshare(CLONE_SYSVSEM)      = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "16777216", 8)     = 8
[pid  5014] close(3)                    = 0
[   66.142780][   T26] audit: type=1400 audit(1692773223.667:83): avc:  denied  { write } for  pid=5010 comm="strace-static-x" path="pipe:[29624]" dev="pipefs" ino=29624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   66.169673][   T26] audit: type=1400 audit(1692773223.697:84): avc:  denied  { execmem } for  pid=5013 comm="syz-executor815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "536870912", 9)    = 9
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "1024", 4)         = 4
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "8192", 4)         = 4
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "1024", 4)         = 4
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "1024", 4)         = 4
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5014] close(3)                    = 0
[pid  5014] getpid()                    = 1
[pid  5014] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5014] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[   66.190190][   T26] audit: type=1400 audit(1692773223.697:85): avc:  denied  { mounton } for  pid=5014 comm="syz-executor815" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   66.215996][   T26] audit: type=1400 audit(1692773223.697:86): avc:  denied  { mount } for  pid=5014 comm="syz-executor815" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[pid  5014] unshare(CLONE_NEWNET)       = 0
[pid  5014] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "0 65535", 7)      = 7
[pid  5014] close(3)                    = 0
[pid  5014] openat(AT_FDCWD, "/dev/rfkill", O_RDWR) = 3
[pid  5014] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8) = 8
[pid  5014] close(3)                    = 0
[pid  5014] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid  5014] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40
[pid  5014] recvfrom(3, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x29\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5014] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5014] recvfrom(3, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[   66.245072][   T26] audit: type=1400 audit(1692773223.697:87): avc:  denied  { mounton } for  pid=5014 comm="syz-executor815" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   66.274823][   T26] audit: type=1400 audit(1692773223.797:88): avc:  denied  { create } for  pid=5014 comm="syz-executor815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[pid  5014] sendto(3, [{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5014] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=2, msg=[{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56
[pid  5014] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5014] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[pid  5014] close(4)                    = 0
[   66.297097][   T26] audit: type=1400 audit(1692773223.797:89): avc:  denied  { create } for  pid=5010 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   66.324099][   T26] audit: type=1400 audit(1692773223.797:90): avc:  denied  { write } for  pid=5010 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[pid  5014] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5014] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
[pid  5014] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5014] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5014] close(4)                    = 0
[   66.345662][   T26] audit: type=1400 audit(1692773223.797:91): avc:  denied  { nlmsg_read } for  pid=5010 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   66.368145][   T26] audit: type=1400 audit(1692773223.797:92): avc:  denied  { read } for  pid=5010 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   66.370626][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[pid  5014] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5014] sendto(3, [{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5014] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=3, msg=[{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56
[pid  5014] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5014] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0
[pid  5014] close(4)                    = 0
[pid  5014] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5014] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
[pid  5014] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5014] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5014] close(4)                    = 0
[pid  5014] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64
[pid  5014] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5014] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5014] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[pid  5014] close(4)                    = 0
[pid  5014] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid  5014] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[   66.396924][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.434897][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[pid  5014] recvfrom(4, [{nlmsg_len=1444, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1444
[pid  5014] close(4)                    = 0
[pid  5014] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5014] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0
[pid  5014] close(4)                    = 0
[pid  5014] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid  5014] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5014] recvfrom(4, [{nlmsg_len=1444, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1444
[pid  5014] close(4)                    = 0
[pid  5014] close(3)                    = 0
[pid  5014] mkdir("/dev/binderfs", 0777) = 0
[pid  5014] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5014] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] rt_sigaction(SIGRT_1, {sa_handler=0x7f8dd82eff20, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8dd82e15d0}, NULL, 8) = 0
[pid  5014] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8dd8264000
[pid  5014] mprotect(0x7f8dd8265000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5014] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8dd8284990, parent_tid=0x7f8dd8284990, exit_signal=0, stack=0x7f8dd8264000, stack_size=0x20300, tls=0x7f8dd82846c0} => {parent_tid=[2]}, 88) = 2
[pid  5014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5014] futex(0x7f8dd8354628, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5018 attached
 <unfinished ...>
[pid  5018] rseq(0x7f8dd8284fe0, 0x20, 0, 0x53053053) = 0
[pid  5018] set_robust_list(0x7f8dd82849a0, 24) = 0
[pid  5018] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[   66.442913][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[pid  5018] memfd_create("syzkaller", 0) = 3
[pid  5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8dcfe64000
[   66.473809][ T5018] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5018 'syz-executor815'
[pid  5018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5018] munmap(0x7f8dcfe64000, 16777216) = 0
[pid  5018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5018] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5018] close(3)                    = 0
[pid  5018] mkdir("./file0", 0777)      = 0
[   66.623406][ T5018] loop0: detected capacity change from 0 to 32768
[   66.635959][ T5018] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor815 (5018)
[   66.655448][ T5018] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   66.664351][ T5018] BTRFS info (device loop0): using free space tree
[pid  5018] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
[pid  5018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5018] chdir("./file0")            = 0
[pid  5018] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5018] close(4)                    = 0
[pid  5018] futex(0x7f8dd835462c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5014] <... futex resumed>)        = 0
[pid  5014] futex(0x7f8dd8354628, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5018] <... futex resumed>)        = 1
[pid  5018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4
[pid  5018] futex(0x7f8dd835462c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5014] <... futex resumed>)        = 0
[pid  5014] futex(0x7f8dd8354628, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5018] <... futex resumed>)        = 1
[pid  5018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5018] futex(0x7f8dd835462c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5014] <... futex resumed>)        = 0
[pid  5014] futex(0x7f8dd8354628, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5018] <... futex resumed>)        = 1
[pid  5018] fallocate(5, 0, 0, 1048816) = 0
[pid  5018] futex(0x7f8dd835462c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5014] <... futex resumed>)        = 0
[pid  5014] futex(0x7f8dd8354628, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835462c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[   66.683770][ T5018] BTRFS info (device loop0): enabling ssd optimizations
[   66.690794][ T5018] BTRFS info (device loop0): auto enabling async discard
[pid  5018] sendfile(4, 5, NULL, 142606348 <unfinished ...>
[pid  5014] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5014] futex(0x7f8dd835463c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8dd0e43000
[pid  5014] mprotect(0x7f8dd0e44000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5014] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8dd0e63990, parent_tid=0x7f8dd0e63990, exit_signal=0, stack=0x7f8dd0e43000, stack_size=0x20300, tls=0x7f8dd0e636c0} => {parent_tid=[3]}, 88) = 3
[pid  5014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5014] futex(0x7f8dd8354638, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5014] futex(0x7f8dd835463c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5035 attached
 <unfinished ...>
[pid  5035] rseq(0x7f8dd0e63fe0, 0x20, 0, 0x53053053) = 0
[pid  5035] set_robust_list(0x7f8dd0e639a0, 24) = 0
[pid  5035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5035] open(".", O_RDONLY)         = 6
[pid  5035] futex(0x7f8dd835463c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5014] <... futex resumed>)        = 0
[pid  5035] <... futex resumed>)        = 1
[pid  5014] futex(0x7f8dd8354638, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5035] ioctl(6, BTRFS_IOC_BALANCE_V2, {flags=0} <unfinished ...>
[pid  5014] futex(0x7f8dd835463c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[   66.857010][ T5035] BTRFS info (device loop0): balance: start 
[   66.866663][ T5018] ------------[ cut here ]------------
[   66.872622][ T5018] BTRFS: Transaction aborted (error -28)
[   66.880108][ T5035] BTRFS info (device loop0: state A): balance: ended with status: 0
[   66.888977][ T5018] WARNING: CPU: 1 PID: 5018 at fs/btrfs/extent-tree.c:3055 __btrfs_free_extent+0x19ea/0x2c30
[   66.899395][ T5018] Modules linked in:
[   66.903330][ T5018] CPU: 1 PID: 5018 Comm: syz-executor815 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[   66.913841][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   66.923980][ T5018] RIP: 0010:__btrfs_free_extent+0x19ea/0x2c30
[   66.930143][ T5018] Code: 00 e8 ca 19 1a fe 0f 1f 44 00 00 bb 01 00 00 00 e9 f5 f7 ff ff e8 b6 19 1a fe 8b 74 24 58 48 c7 c7 40 f3 b4 8a e8 06 db e0 fd <0f> 0b e9 eb f0 ff ff e8 9a 19 1a fe 48 8b 54 24 30 48 b8 00 00 00
[   66.949911][ T5018] RSP: 0018:ffffc9000346ef90 EFLAGS: 00010282
[   66.956338][ T5018] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[   66.964432][ T5018] RDX: ffff888019b56180 RSI: ffffffff814be3c6 RDI: 0000000000000001
[   66.973422][ T5018] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[   66.981502][ T5018] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888077ae20b0
[   66.989530][ T5018] R13: ffff888074cec568 R14: 00000000ffffffe4 R15: 0000000000623000
[   66.997531][ T5018] FS:  00007f8dd82846c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   67.006599][ T5018] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.013276][ T5018] CR2: 00007ffeefe39ffc CR3: 000000007a5cc000 CR4: 00000000003506e0
[   67.021314][ T5018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   67.029347][ T5018] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   67.037342][ T5018] Call Trace:
[   67.040670][ T5018]  <TASK>
[   67.044335][ T5018]  ? __warn+0xe6/0x380
[   67.048471][ T5018]  ? __btrfs_free_extent+0x19ea/0x2c30
[pid  5014] exit_group(1)               = ?
[   67.053973][ T5018]  ? report_bug+0x3bc/0x580
[   67.058538][ T5018]  ? handle_bug+0x3c/0x70
[   67.062894][ T5018]  ? exc_invalid_op+0x17/0x40
[   67.067655][ T5018]  ? asm_exc_invalid_op+0x1a/0x20
[   67.072720][ T5018]  ? __warn_printk+0x1a6/0x350
[   67.077765][ T5018]  ? __btrfs_free_extent+0x19ea/0x2c30
[   67.083273][ T5018]  ? lookup_extent_backref+0x110/0x110
[   67.088822][ T5018]  ? __btrfs_run_delayed_refs+0x60b/0x3b80
[   67.094659][ T5018]  ? reacquire_held_locks+0x4b0/0x4b0
[   67.100082][ T5018]  ? _raw_read_unlock+0x28/0x40
[   67.104974][ T5018]  ? btrfs_merge_delayed_refs+0x47e/0x570
[   67.110768][ T5018]  __btrfs_run_delayed_refs+0xd3d/0x3b80
[   67.116447][ T5018]  ? check_ref_cleanup+0x3e0/0x3e0
[   67.121650][ T5018]  ? lock_sync+0x190/0x190
[   67.126111][ T5018]  btrfs_run_delayed_refs+0x1a1/0x510
[   67.131560][ T5018]  btrfs_commit_transaction+0x81a/0x3fd0
[   67.137218][ T5018]  ? create_pending_snapshots+0x2d0/0x2d0
[   67.142993][ T5018]  ? start_transaction+0x2a5/0x14d0
[   67.148248][ T5018]  btrfs_sync_file+0xfa1/0x1310
[   67.153107][ T5018]  ? start_ordered_ops.constprop.0+0x100/0x100
[   67.159311][ T5018]  ? wake_up_var+0x120/0x120
[   67.163929][ T5018]  ? start_ordered_ops.constprop.0+0x100/0x100
[   67.170135][ T5018]  vfs_fsync_range+0x141/0x220
[   67.174916][ T5018]  iomap_dio_complete+0x812/0x9e0
[   67.179993][ T5018]  btrfs_do_write_iter+0xa00/0x11a0
[   67.185220][ T5018]  ? btrfs_fdatawrite_range+0x110/0x110
[   67.190831][ T5018]  ? preempt_count_sub+0x150/0x150
[   67.195972][ T5018]  do_iter_readv_writev+0x21e/0x3c0
[   67.201258][ T5018]  ? generic_copy_file_range+0x1d0/0x1d0
[   67.207035][ T5018]  ? avc_policy_seqno+0x9/0x10
[   67.211861][ T5018]  ? selinux_file_permission+0x126/0x590
[   67.217591][ T5018]  ? security_file_permission+0x94/0x100
[   67.223253][ T5018]  do_iter_write+0x17f/0x830
[   67.227926][ T5018]  vfs_iter_write+0x7a/0xb0
[   67.232475][ T5018]  iter_file_splice_write+0x698/0xbf0
[   67.238969][ T5018]  ? splice_from_pipe_next+0x5d0/0x5d0
[   67.244454][ T5018]  ? warn_unsupported+0xc0/0xc0
[   67.249367][ T5018]  ? security_file_permission+0xdc/0x100
[   67.255026][ T5018]  ? splice_from_pipe_next+0x5d0/0x5d0
[   67.260549][ T5018]  direct_splice_actor+0x118/0x180
[   67.265700][ T5018]  splice_direct_to_actor+0x347/0xa30
[   67.271219][ T5018]  ? folio_flags.constprop.0+0x150/0x150
[   67.276887][ T5018]  ? vfs_splice_read+0x3b0/0x3b0
[   67.281882][ T5018]  ? security_file_permission+0x94/0x100
[   67.287536][ T5018]  do_splice_direct+0x1af/0x280
[   67.292452][ T5018]  ? splice_direct_to_actor+0xa30/0xa30
[   67.298064][ T5018]  ? propagate_umount+0x1af0/0x1af0
[   67.303281][ T5018]  do_sendfile+0xb88/0x1390
[   67.307879][ T5018]  ? vfs_iocb_iter_write+0x4c0/0x4c0
[   67.313197][ T5018]  ? ptrace_notify+0xf4/0x130
[   67.317912][ T5018]  ? reacquire_held_locks+0x4b0/0x4b0
[   67.323312][ T5018]  __x64_sys_sendfile64+0x1d6/0x220
[   67.328565][ T5018]  ? __ia32_sys_sendfile+0x220/0x220
[   67.333869][ T5018]  ? lockdep_hardirqs_on+0x7d/0x100
[   67.339132][ T5018]  ? _raw_spin_unlock_irq+0x2e/0x50
[   67.344361][ T5018]  ? ptrace_notify+0xf4/0x130
[   67.349102][ T5018]  do_syscall_64+0x38/0xb0
[   67.353545][ T5018]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   67.359518][ T5018] RIP: 0033:0x7f8dd82c8759
[   67.363942][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   67.383598][ T5018] RSP: 002b:00007f8dd8284218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   67.392090][ T5018] RAX: ffffffffffffffda RBX: 00007f8dd8354628 RCX: 00007f8dd82c8759
[   67.400103][ T5018] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[   67.408125][ T5018] RBP: 00007f8dd8354620 R08: 0000000000000000 R09: 0000000000000000
[   67.416110][ T5018] R10: 000000000880000c R11: 0000000000000246 R12: 00007f8dd832174c
[   67.424175][ T5018] R13: 0000000020000600 R14: 00007f8dd831c1a0 R15: 0030656c69662f2e
[   67.432203][ T5018]  </TASK>
[   67.435222][ T5018] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   67.442498][ T5018] CPU: 1 PID: 5018 Comm: syz-executor815 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[   67.452912][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   67.462988][ T5018] Call Trace:
[   67.466268][ T5018]  <TASK>
[   67.469195][ T5018]  dump_stack_lvl+0xd9/0x1b0
[   67.473803][ T5018]  panic+0x6a4/0x750
[   67.477723][ T5018]  ? panic_smp_self_stop+0xa0/0xa0
[   67.482861][ T5018]  ? show_trace_log_lvl+0x29d/0x3c0
[   67.488097][ T5018]  ? __btrfs_free_extent+0x19ea/0x2c30
[   67.493601][ T5018]  check_panic_on_warn+0xab/0xb0
[   67.498572][ T5018]  __warn+0xf2/0x380
[   67.502769][ T5018]  ? __btrfs_free_extent+0x19ea/0x2c30
[   67.508447][ T5018]  report_bug+0x3bc/0x580
[   67.512814][ T5018]  handle_bug+0x3c/0x70
[   67.516992][ T5018]  exc_invalid_op+0x17/0x40
[   67.521514][ T5018]  asm_exc_invalid_op+0x1a/0x20
[   67.526491][ T5018] RIP: 0010:__btrfs_free_extent+0x19ea/0x2c30
[   67.532607][ T5018] Code: 00 e8 ca 19 1a fe 0f 1f 44 00 00 bb 01 00 00 00 e9 f5 f7 ff ff e8 b6 19 1a fe 8b 74 24 58 48 c7 c7 40 f3 b4 8a e8 06 db e0 fd <0f> 0b e9 eb f0 ff ff e8 9a 19 1a fe 48 8b 54 24 30 48 b8 00 00 00
[   67.552241][ T5018] RSP: 0018:ffffc9000346ef90 EFLAGS: 00010282
[   67.558323][ T5018] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[   67.566305][ T5018] RDX: ffff888019b56180 RSI: ffffffff814be3c6 RDI: 0000000000000001
[   67.574288][ T5018] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[   67.582268][ T5018] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888077ae20b0
[   67.590259][ T5018] R13: ffff888074cec568 R14: 00000000ffffffe4 R15: 0000000000623000
[   67.598257][ T5018]  ? __warn_printk+0x1a6/0x350
[   67.603070][ T5018]  ? lookup_extent_backref+0x110/0x110
[   67.608751][ T5018]  ? __btrfs_run_delayed_refs+0x60b/0x3b80
[   67.614585][ T5018]  ? reacquire_held_locks+0x4b0/0x4b0
[   67.619982][ T5018]  ? _raw_read_unlock+0x28/0x40
[   67.624861][ T5018]  ? btrfs_merge_delayed_refs+0x47e/0x570
[   67.630606][ T5018]  __btrfs_run_delayed_refs+0xd3d/0x3b80
[   67.636266][ T5018]  ? check_ref_cleanup+0x3e0/0x3e0
[   67.641396][ T5018]  ? lock_sync+0x190/0x190
[   67.645917][ T5018]  btrfs_run_delayed_refs+0x1a1/0x510
[   67.651309][ T5018]  btrfs_commit_transaction+0x81a/0x3fd0
[   67.656967][ T5018]  ? create_pending_snapshots+0x2d0/0x2d0
[   67.662699][ T5018]  ? start_transaction+0x2a5/0x14d0
[   67.667908][ T5018]  btrfs_sync_file+0xfa1/0x1310
[   67.672785][ T5018]  ? start_ordered_ops.constprop.0+0x100/0x100
[   67.678965][ T5018]  ? wake_up_var+0x120/0x120
[   67.683569][ T5018]  ? start_ordered_ops.constprop.0+0x100/0x100
[   67.689745][ T5018]  vfs_fsync_range+0x141/0x220
[   67.694530][ T5018]  iomap_dio_complete+0x812/0x9e0
[   67.699574][ T5018]  btrfs_do_write_iter+0xa00/0x11a0
[   67.704826][ T5018]  ? btrfs_fdatawrite_range+0x110/0x110
[   67.710414][ T5018]  ? preempt_count_sub+0x150/0x150
[   67.715557][ T5018]  do_iter_readv_writev+0x21e/0x3c0
[   67.720784][ T5018]  ? generic_copy_file_range+0x1d0/0x1d0
[   67.726438][ T5018]  ? avc_policy_seqno+0x9/0x10
[   67.731228][ T5018]  ? selinux_file_permission+0x126/0x590
[   67.736881][ T5018]  ? security_file_permission+0x94/0x100
[   67.742532][ T5018]  do_iter_write+0x17f/0x830
[   67.747149][ T5018]  vfs_iter_write+0x7a/0xb0
[   67.751675][ T5018]  iter_file_splice_write+0x698/0xbf0
[   67.757060][ T5018]  ? splice_from_pipe_next+0x5d0/0x5d0
[   67.762530][ T5018]  ? warn_unsupported+0xc0/0xc0
[   67.767389][ T5018]  ? security_file_permission+0xdc/0x100
[   67.773037][ T5018]  ? splice_from_pipe_next+0x5d0/0x5d0
[   67.778508][ T5018]  direct_splice_actor+0x118/0x180
[   67.783631][ T5018]  splice_direct_to_actor+0x347/0xa30
[   67.789017][ T5018]  ? folio_flags.constprop.0+0x150/0x150
[   67.794748][ T5018]  ? vfs_splice_read+0x3b0/0x3b0
[   67.799697][ T5018]  ? security_file_permission+0x94/0x100
[   67.805341][ T5018]  do_splice_direct+0x1af/0x280
[   67.810212][ T5018]  ? splice_direct_to_actor+0xa30/0xa30
[   67.815856][ T5018]  ? propagate_umount+0x1af0/0x1af0
[   67.821068][ T5018]  do_sendfile+0xb88/0x1390
[   67.825598][ T5018]  ? vfs_iocb_iter_write+0x4c0/0x4c0
[   67.830914][ T5018]  ? ptrace_notify+0xf4/0x130
[   67.835602][ T5018]  ? reacquire_held_locks+0x4b0/0x4b0
[   67.841000][ T5018]  __x64_sys_sendfile64+0x1d6/0x220
[   67.846212][ T5018]  ? __ia32_sys_sendfile+0x220/0x220
[   67.851508][ T5018]  ? lockdep_hardirqs_on+0x7d/0x100
[   67.856725][ T5018]  ? _raw_spin_unlock_irq+0x2e/0x50
[   67.861947][ T5018]  ? ptrace_notify+0xf4/0x130
[   67.866638][ T5018]  do_syscall_64+0x38/0xb0
[   67.871065][ T5018]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   67.876971][ T5018] RIP: 0033:0x7f8dd82c8759
[   67.881398][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   67.901017][ T5018] RSP: 002b:00007f8dd8284218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   67.909445][ T5018] RAX: ffffffffffffffda RBX: 00007f8dd8354628 RCX: 00007f8dd82c8759
[   67.917424][ T5018] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[   67.925400][ T5018] RBP: 00007f8dd8354620 R08: 0000000000000000 R09: 0000000000000000
[   67.933381][ T5018] R10: 000000000880000c R11: 0000000000000246 R12: 00007f8dd832174c
[   67.941368][ T5018] R13: 0000000020000600 R14: 00007f8dd831c1a0 R15: 0030656c69662f2e
[   67.949351][ T5018]  </TASK>
[   67.952559][ T5018] Kernel Offset: disabled
[   67.957073][ T5018] Rebooting in 86400 seconds..