./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2439013754

<...>
Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts.
execve("./syz-executor2439013754", ["./syz-executor2439013754"], 0x7ffd87030880 /* 10 vars */) = 0
brk(NULL)                               = 0x555555711000
brk(0x555555711c40)                     = 0x555555711c40
arch_prctl(ARCH_SET_FS, 0x555555711300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2439013754", 4096) = 28
brk(0x555555732c40)                     = 0x555555732c40
brk(0x555555733000)                     = 0x555555733000
mprotect(0x7ff9edfa1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1)                        = 1
close(3)                                = 0
getpid()                                = 5077
mkdir("./syzkaller.2VPqG5", 0700)       = 0
chmod("./syzkaller.2VPqG5", 0777)       = 0
chdir("./syzkaller.2VPqG5")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557115d0) = 5078
./strace-static-x86_64: Process 5078 attached
[pid  5078] chdir("./0")                = 0
[pid  5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5078] setpgid(0, 0)               = 0
[pid  5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1000", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5078] memfd_create("syzkaller", 0) = 3
[pid  5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff9e5ae0000
syzkaller login: [   60.970423][ T5078] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5078 'syz-executor243'
[pid  5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5078] munmap(0x7ff9e5ae0000, 16777216) = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5078] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5078] close(3)                    = 0
[pid  5078] mkdir("./file0", 0777)      = 0
[   61.158527][ T5078] loop0: detected capacity change from 0 to 32768
[   61.172551][ T5078] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor243 (5078)
[   61.193556][ T5078] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[pid  5078] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
[pid  5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5078] chdir("./file0")            = 0
[pid  5078] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5078] close(4)                    = 0
[pid  5078] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   61.202681][ T5078] BTRFS info (device loop0): using free space tree
[   61.227653][ T5078] BTRFS info (device loop0): enabling ssd optimizations
[   61.235020][ T5078] BTRFS info (device loop0): auto enabling async discard
[pid  5078] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
[pid  5078] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  5078] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191
[pid  5078] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid  5078] write(6, "9", 1)            = 1
[   61.353161][ T5078] FAULT_INJECTION: forcing a failure.
[   61.353161][ T5078] name failslab, interval 1, probability 0, space 0, times 1
[   61.369666][   T56] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   61.379865][ T5078] CPU: 1 PID: 5078 Comm: syz-executor243 Not tainted 6.2.0-rc4-next-20230116-syzkaller #0
[   61.389793][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   61.399876][ T5078] Call Trace:
[   61.403179][ T5078]  <TASK>
[   61.406135][ T5078]  dump_stack_lvl+0xd1/0x138
[   61.410785][ T5078]  should_fail_ex.cold+0x5/0xa
[   61.415610][ T5078]  ? alloc_extent_map+0x1e/0x150
[   61.420593][ T5078]  should_failslab+0x9/0x20
[   61.425140][ T5078]  kmem_cache_alloc+0x5a/0x320
[   61.429948][ T5078]  alloc_extent_map+0x1e/0x150
[   61.434755][ T5078]  create_io_em+0x32/0x2d0
[   61.439210][ T5078]  cow_file_range+0x4bd/0xd10
[   61.443934][ T5078]  ? test_range_bit+0x3c/0x4b0
[   61.448739][ T5078]  ? cow_file_range_inline+0x7c0/0x7c0
[   61.454237][ T5078]  ? free_extent_state+0x50/0x440
[   61.459284][ T5078]  ? find_lock_delalloc_range+0x53d/0x690
[   61.465007][ T5078]  btrfs_run_delalloc_range+0x593/0x1340
[   61.470645][ T5078]  ? mark_lock.part.0+0xee/0x1910
[   61.475710][ T5078]  writepage_delalloc+0x1a6/0x3e0
[   61.480737][ T5078]  ? find_lock_delalloc_range+0x690/0x690
[   61.486464][ T5078]  __extent_writepage+0xff0/0x1560
[   61.491577][ T5078]  ? btrfs_do_readpage+0x1600/0x1600
[   61.496862][ T5078]  ? folio_clear_dirty_for_io+0x10f/0x770
[   61.502585][ T5078]  extent_write_cache_pages+0x445/0xd00
[   61.508135][ T5078]  ? __extent_writepage+0x1560/0x1560
[   61.513507][ T5078]  ? lock_acquire+0x32/0xc0
[   61.518013][ T5078]  ? is_bpf_text_address+0x4/0x1b0
[   61.523130][ T5078]  ? __lock_acquire+0x25c1/0x5780
[   61.528162][ T5078]  extent_writepages+0x1ae/0x450
[   61.533106][ T5078]  ? extent_write_locked_range+0xea0/0xea0
[   61.538912][ T5078]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   61.544916][ T5078]  ? stack_trace_save+0x90/0xc0
[   61.549772][ T5078]  ? find_held_lock+0x2d/0x110
[   61.554546][ T5078]  ? btrfs_readahead+0x20/0x20
[   61.559303][ T5078]  do_writepages+0x1a8/0x640
[   61.563896][ T5078]  ? writeback_set_ratelimit+0x150/0x150
[   61.569533][ T5078]  ? rcu_read_lock_sched_held+0x3e/0x70
[   61.575099][ T5078]  ? do_raw_spin_unlock+0x175/0x230
[   61.580292][ T5078]  ? _raw_spin_unlock+0x28/0x40
[   61.585151][ T5078]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[   61.591135][ T5078]  filemap_fdatawrite_wbc+0x147/0x1b0
[   61.596511][ T5078]  __filemap_fdatawrite_range+0xb8/0xf0
[   61.602061][ T5078]  ? delete_from_page_cache_batch+0x8e0/0x8e0
[   61.608139][ T5078]  ? lock_sync+0x190/0x190
[   61.612559][ T5078]  ? btrfs_inode_lock+0xeb/0xf0
[   61.617404][ T5078]  ? rcu_read_lock_sched_held+0x3e/0x70
[   61.622943][ T5078]  ? trace_lock_acquire+0x1f1/0x290
[   61.628137][ T5078]  btrfs_fdatawrite_range+0x4a/0x110
[   61.633425][ T5078]  btrfs_wait_ordered_range+0xd8/0x5b0
[   61.638880][ T5078]  ? down_write+0x157/0x220
[   61.643378][ T5078]  ? down_write_killable_nested+0x250/0x250
[   61.649265][ T5078]  ? btrfs_run_ordered_extent_work+0x30/0x30
[   61.655240][ T5078]  ? find_held_lock+0x2d/0x110
[   61.660009][ T5078]  btrfs_fallocate+0xab6/0x27b0
[   61.664872][ T5078]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   61.670933][ T5078]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   61.676909][ T5078]  ? aa_path_link+0x2f0/0x2f0
[   61.681585][ T5078]  ? lock_sync+0x190/0x190
[   61.685997][ T5078]  ? ioctl_preallocate+0x18e/0x200
[   61.691103][ T5078]  ? rcu_read_lock_sched_held+0x3e/0x70
[   61.696639][ T5078]  ? trace_lock_acquire+0x1f1/0x290
[   61.701833][ T5078]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   61.707901][ T5078]  vfs_fallocate+0x48b/0xe40
[   61.712490][ T5078]  ioctl_preallocate+0x18e/0x200
[   61.717423][ T5078]  ? fiemap_prep+0x220/0x220
[   61.722016][ T5078]  do_vfs_ioctl+0x12d0/0x15b0
[   61.726690][ T5078]  ? vfs_fileattr_set+0xc40/0xc40
[   61.731716][ T5078]  ? find_held_lock+0x2d/0x110
[   61.736481][ T5078]  ? name_to_dev_t+0x362/0x990
[   61.741250][ T5078]  ? bpf_lsm_file_ioctl+0x9/0x10
[   61.746187][ T5078]  __x64_sys_ioctl+0x10c/0x210
[   61.750950][ T5078]  do_syscall_64+0x39/0xb0
[   61.755363][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.761247][ T5078] RIP: 0033:0x7ff9edf2dac9
[   61.765657][ T5078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   61.785257][ T5078] RSP: 002b:00007ffca9780538 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   61.793686][ T5078] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff9edf2dac9
[   61.801648][ T5078] RDX: 0000000020000100 RSI: 0000000040305829 RDI: 0000000000000005
[   61.809608][ T5078] RBP: 00007ffca9780560 R08: 0000000000000001 R09: 00007ffca9780570
[   61.817568][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[   61.825530][ T5078] R13: 00007ffca97805a0 R14: 00007ffca9780580 R15: 0000000000000000
[   61.833504][ T5078]  </TASK>
[pid  5078] ioctl(5, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0x20000100) = -1 EIO (Input/output error)
[pid  5078] exit_group(0)               = ?
[pid  5078] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555712620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555571a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555571a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555712620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557115d0) = 5100
./strace-static-x86_64: Process 5100 attached
[pid  5100] chdir("./1")                = 0
[pid  5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5100] setpgid(0, 0)               = 0
[pid  5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5100] write(3, "1000", 4)         = 4
[pid  5100] close(3)                    = 0
[pid  5100] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5100] memfd_create("syzkaller", 0) = 3
[pid  5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff9e5ae0000
[pid  5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5100] munmap(0x7ff9e5ae0000, 16777216) = 0
[pid  5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5100] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5100] close(3)                    = 0
[pid  5100] mkdir("./file0", 0777)      = 0
[   62.299202][ T5100] loop0: detected capacity change from 0 to 32768
[   62.314071][ T5100] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   62.323052][ T5100] BTRFS info (device loop0): using free space tree
[   62.341453][ T5100] BTRFS info (device loop0): enabling ssd optimizations
[pid  5100] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
[pid  5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5100] chdir("./file0")            = 0
[pid  5100] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5100] close(4)                    = 0
[pid  5100] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   62.348436][ T5100] BTRFS info (device loop0): auto enabling async discard
[pid  5100] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
[pid  5100] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  5100] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191
[pid  5100] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid  5100] write(6, "9", 1)            = 1
[   62.429991][ T5100] FAULT_INJECTION: forcing a failure.
[   62.429991][ T5100] name failslab, interval 1, probability 0, space 0, times 0
[   62.441704][   T46] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   62.442868][ T5100] CPU: 1 PID: 5100 Comm: syz-executor243 Not tainted 6.2.0-rc4-next-20230116-syzkaller #0
[   62.461605][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   62.471667][ T5100] Call Trace:
[   62.474951][ T5100]  <TASK>
[   62.477887][ T5100]  dump_stack_lvl+0xd1/0x138
[   62.482502][ T5100]  should_fail_ex.cold+0x5/0xa
[   62.487295][ T5100]  ? alloc_extent_map+0x1e/0x150
[   62.492258][ T5100]  should_failslab+0x9/0x20
[   62.496782][ T5100]  kmem_cache_alloc+0x5a/0x320
[   62.501569][ T5100]  alloc_extent_map+0x1e/0x150
[   62.506358][ T5100]  create_io_em+0x32/0x2d0
[   62.510795][ T5100]  cow_file_range+0x4bd/0xd10
[   62.515495][ T5100]  ? test_range_bit+0x3c/0x4b0
[   62.520281][ T5100]  ? cow_file_range_inline+0x7c0/0x7c0
[   62.525758][ T5100]  ? free_extent_state+0x50/0x440
[   62.530798][ T5100]  ? find_lock_delalloc_range+0x53d/0x690
[   62.536545][ T5100]  btrfs_run_delalloc_range+0x593/0x1340
[   62.542232][ T5100]  ? mark_lock.part.0+0xee/0x1910
[   62.547301][ T5100]  writepage_delalloc+0x1a6/0x3e0
[   62.552367][ T5100]  ? find_lock_delalloc_range+0x690/0x690
[   62.558138][ T5100]  __extent_writepage+0xff0/0x1560
[   62.563292][ T5100]  ? btrfs_do_readpage+0x1600/0x1600
[   62.568611][ T5100]  ? folio_clear_dirty_for_io+0x10f/0x770
[   62.574359][ T5100]  extent_write_cache_pages+0x445/0xd00
[   62.579956][ T5100]  ? __extent_writepage+0x1560/0x1560
[   62.585357][ T5100]  ? lock_chain_count+0x20/0x20
[   62.590227][ T5100]  ? __up_read+0x6ae/0x720
[   62.594677][ T5100]  ? __lock_acquire+0x16c8/0x5780
[   62.599726][ T5100]  extent_writepages+0x1ae/0x450
[   62.604706][ T5100]  ? extent_write_locked_range+0xea0/0xea0
[   62.610542][ T5100]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   62.616539][ T5100]  ? register_lock_class+0xbe/0x1120
[   62.621847][ T5100]  ? find_held_lock+0x2d/0x110
[   62.626642][ T5100]  ? btrfs_readahead+0x20/0x20
[   62.631416][ T5100]  do_writepages+0x1a8/0x640
[   62.636033][ T5100]  ? writeback_set_ratelimit+0x150/0x150
[   62.641682][ T5100]  ? rcu_read_lock_sched_held+0x3e/0x70
[   62.647246][ T5100]  ? do_raw_spin_unlock+0x175/0x230
[   62.652474][ T5100]  ? _raw_spin_unlock+0x28/0x40
[   62.657340][ T5100]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[   62.663342][ T5100]  filemap_fdatawrite_wbc+0x147/0x1b0
[   62.668737][ T5100]  __filemap_fdatawrite_range+0xb8/0xf0
[   62.674309][ T5100]  ? delete_from_page_cache_batch+0x8e0/0x8e0
[   62.680412][ T5100]  ? lock_sync+0x190/0x190
[   62.684849][ T5100]  ? btrfs_inode_lock+0xeb/0xf0
[   62.689713][ T5100]  ? rcu_read_lock_sched_held+0x3e/0x70
[   62.695272][ T5100]  ? trace_lock_acquire+0x1f1/0x290
[   62.700489][ T5100]  btrfs_fdatawrite_range+0x4a/0x110
[   62.705803][ T5100]  btrfs_wait_ordered_range+0xd8/0x5b0
[   62.711282][ T5100]  ? down_write+0x157/0x220
[   62.715798][ T5100]  ? down_write_killable_nested+0x250/0x250
[   62.721707][ T5100]  ? btrfs_run_ordered_extent_work+0x30/0x30
[   62.727711][ T5100]  ? find_held_lock+0x2d/0x110
[   62.732600][ T5100]  btrfs_fallocate+0xab6/0x27b0
[   62.737512][ T5100]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   62.743619][ T5100]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   62.749627][ T5100]  ? aa_path_link+0x2f0/0x2f0
[   62.754342][ T5100]  ? lock_sync+0x190/0x190
[   62.758779][ T5100]  ? ioctl_preallocate+0x18e/0x200
[   62.763908][ T5100]  ? rcu_read_lock_sched_held+0x3e/0x70
[   62.769470][ T5100]  ? trace_lock_acquire+0x1f1/0x290
[   62.774713][ T5100]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   62.780808][ T5100]  vfs_fallocate+0x48b/0xe40
[   62.785417][ T5100]  ioctl_preallocate+0x18e/0x200
[   62.790369][ T5100]  ? fiemap_prep+0x220/0x220
[   62.794996][ T5100]  do_vfs_ioctl+0x12d0/0x15b0
[   62.799690][ T5100]  ? vfs_fileattr_set+0xc40/0xc40
[   62.804744][ T5100]  ? find_held_lock+0x2d/0x110
[   62.809542][ T5100]  ? name_to_dev_t+0x362/0x990
[   62.814349][ T5100]  ? bpf_lsm_file_ioctl+0x9/0x10
[   62.819313][ T5100]  __x64_sys_ioctl+0x10c/0x210
[   62.824097][ T5100]  do_syscall_64+0x39/0xb0
[   62.828543][ T5100]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   62.834456][ T5100] RIP: 0033:0x7ff9edf2dac9
[   62.838889][ T5100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   62.858524][ T5100] RSP: 002b:00007ffca9780538 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   62.866951][ T5100] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff9edf2dac9
[   62.874931][ T5100] RDX: 0000000020000100 RSI: 0000000040305829 RDI: 0000000000000005
[   62.882911][ T5100] RBP: 00007ffca9780560 R08: 0000000000000001 R09: 00007ffca9780570
[   62.890894][ T5100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[   62.898872][ T5100] R13: 00007ffca97805a0 R14: 00007ffca9780580 R15: 0000000000000001
[   62.906871][ T5100]  </TASK>
[pid  5100] ioctl(5, _IOC(_IOC_WRITE, 0x58, 0x29, 0x30), 0x20000100) = -1 EIO (Input/output error)
[pid  5100] exit_group(0)               = ?
[pid  5100] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} ---
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555712620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555571a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555571a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555555712620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557115d0) = 5123
./strace-static-x86_64: Process 5123 attached
[pid  5123] chdir("./2")                = 0
[pid  5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5123] setpgid(0, 0)               = 0
[pid  5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5123] write(3, "1000", 4)         = 4
[pid  5123] close(3)                    = 0
[pid  5123] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5123] memfd_create("syzkaller", 0) = 3
[pid  5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff9e5ae0000
[pid  5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5123] munmap(0x7ff9e5ae0000, 16777216) = 0
[pid  5123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5123] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5123] close(3)                    = 0
[pid  5123] mkdir("./file0", 0777)      = 0
[   63.324541][ T5123] loop0: detected capacity change from 0 to 32768
[   63.336570][ T5123] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   63.345771][ T5123] BTRFS info (device loop0): using free space tree
[   63.365617][ T5123] BTRFS info (device loop0): enabling ssd optimizations
[pid  5123] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
[pid  5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5123] chdir("./file0")            = 0
[pid  5123] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5123] close(4)                    = 0
[pid  5123] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   63.372758][ T5123] BTRFS info (device loop0): auto enabling async discard
[pid  5123] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
[pid  5123] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  5123] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191
[pid  5123] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid  5123] write(6, "9", 1)            = 1
[   63.435433][ T5123] FAULT_INJECTION: forcing a failure.
[   63.435433][ T5123] name failslab, interval 1, probability 0, space 0, times 0
[   63.448589][ T5123] CPU: 0 PID: 5123 Comm: syz-executor243 Not tainted 6.2.0-rc4-next-20230116-syzkaller #0
[   63.458516][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   63.468597][ T5123] Call Trace:
[   63.471893][ T5123]  <TASK>
[   63.474846][ T5123]  dump_stack_lvl+0xd1/0x138
[   63.479482][ T5123]  should_fail_ex.cold+0x5/0xa
[   63.484297][ T5123]  should_failslab+0x9/0x20
[   63.488846][ T5123]  __kmem_cache_alloc_node+0x5b/0x330
[   63.494252][ T5123]  ? ulist_add_merge.part.0+0x85/0x490
[   63.499750][ T5123]  kmalloc_trace+0x26/0x60
[   63.504206][ T5123]  ulist_add_merge.part.0+0x85/0x490
[   63.509527][ T5123]  ? btrfs_clear_delalloc_extent+0x1d4/0xaa0
[   63.511360][   T56] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   63.515530][ T5123]  ulist_add+0x106/0x160
[   63.515586][ T5123]  clear_state_bit+0x151/0x3a0
[   63.533718][ T5123]  __clear_extent_bit+0x593/0xc80
[   63.538797][ T5123]  clear_record_extent_bits+0x5c/0x70
[   63.544212][ T5123]  __btrfs_qgroup_release_data+0x1a2/0xa60
[   63.550067][ T5123]  ? btrfs_qgroup_account_extents+0xb90/0xb90
[   63.556172][ T5123]  ? lock_downgrade+0x6e0/0x6e0
[   63.561081][ T5123]  btrfs_add_ordered_extent+0xae1/0x11b0
[   63.566766][ T5123]  ? create_io_em+0x1e0/0x2d0
[   63.571485][ T5123]  cow_file_range+0x50f/0xd10
[   63.576209][ T5123]  ? test_range_bit+0x3c/0x4b0
[   63.581019][ T5123]  ? cow_file_range_inline+0x7c0/0x7c0
[   63.586516][ T5123]  ? free_extent_state+0x50/0x440
[   63.591584][ T5123]  ? find_lock_delalloc_range+0x53d/0x690
[   63.597353][ T5123]  btrfs_run_delalloc_range+0x593/0x1340
[   63.603053][ T5123]  ? mark_lock.part.0+0xee/0x1910
[   63.608122][ T5123]  writepage_delalloc+0x1a6/0x3e0
[   63.613201][ T5123]  ? find_lock_delalloc_range+0x690/0x690
[   63.618995][ T5123]  __extent_writepage+0xff0/0x1560
[   63.624166][ T5123]  ? btrfs_do_readpage+0x1600/0x1600
[   63.629484][ T5123]  ? folio_clear_dirty_for_io+0x10f/0x770
[   63.635220][ T5123]  extent_write_cache_pages+0x445/0xd00
[   63.640812][ T5123]  ? __extent_writepage+0x1560/0x1560
[   63.646187][ T5123]  ? lock_chain_count+0x20/0x20
[   63.651048][ T5123]  ? __up_read+0x6ae/0x720
[   63.655503][ T5123]  ? __lock_acquire+0x16c8/0x5780
[   63.660534][ T5123]  extent_writepages+0x1ae/0x450
[   63.665490][ T5123]  ? extent_write_locked_range+0xea0/0xea0
[   63.671339][ T5123]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   63.677352][ T5123]  ? register_lock_class+0xbe/0x1120
[   63.682681][ T5123]  ? find_held_lock+0x2d/0x110
[   63.687458][ T5123]  ? btrfs_readahead+0x20/0x20
[   63.692240][ T5123]  do_writepages+0x1a8/0x640
[   63.696832][ T5123]  ? writeback_set_ratelimit+0x150/0x150
[   63.702462][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   63.708021][ T5123]  ? do_raw_spin_unlock+0x175/0x230
[   63.713236][ T5123]  ? _raw_spin_unlock+0x28/0x40
[   63.718096][ T5123]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[   63.724092][ T5123]  filemap_fdatawrite_wbc+0x147/0x1b0
[   63.729483][ T5123]  __filemap_fdatawrite_range+0xb8/0xf0
[   63.735069][ T5123]  ? delete_from_page_cache_batch+0x8e0/0x8e0
[   63.741177][ T5123]  ? lock_sync+0x190/0x190
[   63.745587][ T5123]  ? btrfs_inode_lock+0xeb/0xf0
[   63.750434][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   63.755976][ T5123]  ? trace_lock_acquire+0x1f1/0x290
[   63.761184][ T5123]  btrfs_fdatawrite_range+0x4a/0x110
[   63.766503][ T5123]  btrfs_wait_ordered_range+0xd8/0x5b0
[   63.771960][ T5123]  ? down_write+0x157/0x220
[   63.776456][ T5123]  ? down_write_killable_nested+0x250/0x250
[   63.782343][ T5123]  ? btrfs_run_ordered_extent_work+0x30/0x30
[   63.788329][ T5123]  ? find_held_lock+0x2d/0x110
[   63.793129][ T5123]  btrfs_fallocate+0xab6/0x27b0
[   63.797989][ T5123]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   63.804074][ T5123]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   63.810093][ T5123]  ? aa_path_link+0x2f0/0x2f0
[   63.814794][ T5123]  ? lock_sync+0x190/0x190
[   63.819205][ T5123]  ? ioctl_preallocate+0x18e/0x200
[   63.824319][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   63.829880][ T5123]  ? trace_lock_acquire+0x1f1/0x290
[   63.835079][ T5123]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   63.841148][ T5123]  vfs_fallocate+0x48b/0xe40
[   63.845736][ T5123]  ioctl_preallocate+0x18e/0x200
[   63.850682][ T5123]  ? fiemap_prep+0x220/0x220
[   63.855301][ T5123]  do_vfs_ioctl+0x12d0/0x15b0
[   63.860008][ T5123]  ? vfs_fileattr_set+0xc40/0xc40
[   63.865058][ T5123]  ? find_held_lock+0x2d/0x110
[   63.869857][ T5123]  ? name_to_dev_t+0x362/0x990
[   63.874628][ T5123]  ? bpf_lsm_file_ioctl+0x9/0x10
[   63.879576][ T5123]  __x64_sys_ioctl+0x10c/0x210
[   63.884338][ T5123]  do_syscall_64+0x39/0xb0
[   63.888753][ T5123]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   63.894641][ T5123] RIP: 0033:0x7ff9edf2dac9
[   63.899055][ T5123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   63.918670][ T5123] RSP: 002b:00007ffca9780538 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   63.927089][ T5123] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff9edf2dac9
[   63.935052][ T5123] RDX: 0000000020000100 RSI: 0000000040305829 RDI: 0000000000000005
[   63.943015][ T5123] RBP: 00007ffca9780560 R08: 0000000000000001 R09: 00007ffca9780570
[   63.950978][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[   63.958952][ T5123] R13: 00007ffca97805a0 R14: 00007ffca9780580 R15: 0000000000000002
[   63.966953][ T5123]  </TASK>
[   63.970514][ T5123] ------------[ cut here ]------------
[   63.975984][ T5123] kernel BUG at fs/btrfs/extent-io-tree.c:515!
[   63.982198][ T5123] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   63.988265][ T5123] CPU: 0 PID: 5123 Comm: syz-executor243 Not tainted 6.2.0-rc4-next-20230116-syzkaller #0
[   63.998147][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   64.008193][ T5123] RIP: 0010:clear_state_bit+0x31b/0x3a0
[   64.013754][ T5123] Code: 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 33 44 8b 7d 7c e9 af fe ff ff e8 be 74 fb fd 0f 0b eb 97 e8 b5 74 fb fd <0f> 0b 4c 89 f7 e8 bb 2f 49 fe e9 72 fd ff ff 4c 89 f7 e8 ae 2f 49
[   64.033352][ T5123] RSP: 0018:ffffc90003ddec90 EFLAGS: 00010293
[   64.039416][ T5123] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000
[   64.047379][ T5123] RDX: ffff888019d23a80 RSI: ffffffff83865fab RDI: 0000000000000005
[   64.055348][ T5123] RBP: ffff88802baf2cc0 R08: 0000000000000005 R09: 0000000000000000
[   64.063301][ T5123] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888073144420
[   64.071255][ T5123] R13: 0000000000000000 R14: ffff88802baf2d3c R15: 000000000000ffff
[   64.079213][ T5123] FS:  0000555555711300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   64.088129][ T5123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.094704][ T5123] CR2: 0000000020010000 CR3: 0000000075f6c000 CR4: 00000000003506f0
[   64.102661][ T5123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   64.110640][ T5123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   64.118599][ T5123] Call Trace:
[   64.121872][ T5123]  <TASK>
[   64.124804][ T5123]  __clear_extent_bit+0x593/0xc80
[   64.129824][ T5123]  clear_record_extent_bits+0x5c/0x70
[   64.135196][ T5123]  __btrfs_qgroup_release_data+0x1a2/0xa60
[   64.141018][ T5123]  ? btrfs_qgroup_account_extents+0xb90/0xb90
[   64.147075][ T5123]  ? lock_downgrade+0x6e0/0x6e0
[   64.151916][ T5123]  btrfs_add_ordered_extent+0xae1/0x11b0
[   64.157540][ T5123]  ? create_io_em+0x1e0/0x2d0
[   64.162215][ T5123]  cow_file_range+0x50f/0xd10
[   64.166907][ T5123]  ? test_range_bit+0x3c/0x4b0
[   64.171657][ T5123]  ? cow_file_range_inline+0x7c0/0x7c0
[   64.177103][ T5123]  ? free_extent_state+0x50/0x440
[   64.182114][ T5123]  ? find_lock_delalloc_range+0x53d/0x690
[   64.187836][ T5123]  btrfs_run_delalloc_range+0x593/0x1340
[   64.193490][ T5123]  ? mark_lock.part.0+0xee/0x1910
[   64.198502][ T5123]  writepage_delalloc+0x1a6/0x3e0
[   64.203517][ T5123]  ? find_lock_delalloc_range+0x690/0x690
[   64.209232][ T5123]  __extent_writepage+0xff0/0x1560
[   64.214335][ T5123]  ? btrfs_do_readpage+0x1600/0x1600
[   64.219624][ T5123]  ? folio_clear_dirty_for_io+0x10f/0x770
[   64.225357][ T5123]  extent_write_cache_pages+0x445/0xd00
[   64.230899][ T5123]  ? __extent_writepage+0x1560/0x1560
[   64.236262][ T5123]  ? lock_chain_count+0x20/0x20
[   64.241098][ T5123]  ? __up_read+0x6ae/0x720
[   64.245508][ T5123]  ? __lock_acquire+0x16c8/0x5780
[   64.250520][ T5123]  extent_writepages+0x1ae/0x450
[   64.255448][ T5123]  ? extent_write_locked_range+0xea0/0xea0
[   64.261251][ T5123]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   64.267240][ T5123]  ? register_lock_class+0xbe/0x1120
[   64.272527][ T5123]  ? find_held_lock+0x2d/0x110
[   64.277283][ T5123]  ? btrfs_readahead+0x20/0x20
[   64.282044][ T5123]  do_writepages+0x1a8/0x640
[   64.286647][ T5123]  ? writeback_set_ratelimit+0x150/0x150
[   64.292267][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   64.297811][ T5123]  ? do_raw_spin_unlock+0x175/0x230
[   64.303021][ T5123]  ? _raw_spin_unlock+0x28/0x40
[   64.307859][ T5123]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[   64.313840][ T5123]  filemap_fdatawrite_wbc+0x147/0x1b0
[   64.319224][ T5123]  __filemap_fdatawrite_range+0xb8/0xf0
[   64.324772][ T5123]  ? delete_from_page_cache_batch+0x8e0/0x8e0
[   64.330871][ T5123]  ? lock_sync+0x190/0x190
[   64.335294][ T5123]  ? btrfs_inode_lock+0xeb/0xf0
[   64.340129][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   64.345671][ T5123]  ? trace_lock_acquire+0x1f1/0x290
[   64.350864][ T5123]  btrfs_fdatawrite_range+0x4a/0x110
[   64.356145][ T5123]  btrfs_wait_ordered_range+0xd8/0x5b0
[   64.361597][ T5123]  ? down_write+0x157/0x220
[   64.366087][ T5123]  ? down_write_killable_nested+0x250/0x250
[   64.371965][ T5123]  ? btrfs_run_ordered_extent_work+0x30/0x30
[   64.377935][ T5123]  ? find_held_lock+0x2d/0x110
[   64.382699][ T5123]  btrfs_fallocate+0xab6/0x27b0
[   64.387547][ T5123]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   64.393606][ T5123]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   64.399585][ T5123]  ? aa_path_link+0x2f0/0x2f0
[   64.404267][ T5123]  ? lock_sync+0x190/0x190
[   64.408695][ T5123]  ? ioctl_preallocate+0x18e/0x200
[   64.413798][ T5123]  ? rcu_read_lock_sched_held+0x3e/0x70
[   64.419335][ T5123]  ? trace_lock_acquire+0x1f1/0x290
[   64.424521][ T5123]  ? btrfs_replace_file_extents+0x14e0/0x14e0
[   64.430584][ T5123]  vfs_fallocate+0x48b/0xe40
[   64.435164][ T5123]  ioctl_preallocate+0x18e/0x200
[   64.440097][ T5123]  ? fiemap_prep+0x220/0x220
[   64.444690][ T5123]  do_vfs_ioctl+0x12d0/0x15b0
[   64.449364][ T5123]  ? vfs_fileattr_set+0xc40/0xc40
[   64.454410][ T5123]  ? find_held_lock+0x2d/0x110
[   64.459203][ T5123]  ? name_to_dev_t+0x362/0x990
[   64.464000][ T5123]  ? bpf_lsm_file_ioctl+0x9/0x10
[   64.468935][ T5123]  __x64_sys_ioctl+0x10c/0x210
[   64.473712][ T5123]  do_syscall_64+0x39/0xb0
[   64.478122][ T5123]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   64.484007][ T5123] RIP: 0033:0x7ff9edf2dac9
[   64.488408][ T5123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   64.508010][ T5123] RSP: 002b:00007ffca9780538 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   64.516410][ T5123] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff9edf2dac9
[   64.524375][ T5123] RDX: 0000000020000100 RSI: 0000000040305829 RDI: 0000000000000005
[   64.532351][ T5123] RBP: 00007ffca9780560 R08: 0000000000000001 R09: 00007ffca9780570
[   64.540324][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[   64.548311][ T5123] R13: 00007ffca97805a0 R14: 00007ffca9780580 R15: 0000000000000002
[   64.556283][ T5123]  </TASK>
[   64.559289][ T5123] Modules linked in:
[   64.563248][ T5123] ---[ end trace 0000000000000000 ]---
[   64.568714][ T5123] RIP: 0010:clear_state_bit+0x31b/0x3a0
[   64.574307][ T5123] Code: 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 33 44 8b 7d 7c e9 af fe ff ff e8 be 74 fb fd 0f 0b eb 97 e8 b5 74 fb fd <0f> 0b 4c 89 f7 e8 bb 2f 49 fe e9 72 fd ff ff 4c 89 f7 e8 ae 2f 49
[   64.593960][ T5123] RSP: 0018:ffffc90003ddec90 EFLAGS: 00010293
[   64.600073][ T5123] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000
[   64.608034][ T5123] RDX: ffff888019d23a80 RSI: ffffffff83865fab RDI: 0000000000000005
[   64.616034][ T5123] RBP: ffff88802baf2cc0 R08: 0000000000000005 R09: 0000000000000000
[   64.624030][ T5123] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888073144420
[   64.632021][ T5123] R13: 0000000000000000 R14: ffff88802baf2d3c R15: 000000000000ffff
[   64.640014][ T5123] FS:  0000555555711300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   64.648964][ T5123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.655554][ T5123] CR2: 0000000020010000 CR3: 0000000075f6c000 CR4: 00000000003506f0
[   64.663553][ T5123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   64.671563][ T5123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   64.679571][ T5123] Kernel panic - not syncing: Fatal exception
[   64.685692][ T5123] Kernel Offset: disabled
[   64.690006][ T5123] Rebooting in 86400 seconds..