loop0: detected capacity change from 0 to 32768 BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5348) BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 BTRFS info (device loop0): rebuilding free space tree BTRFS info (device loop0): disabling free space tree BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) BTRFS info (device loop0): enabling ssd optimizations BTRFS info (device loop0): turning on async discard BTRFS info (device loop0): enabling disk space caching BTRFS info (device loop0): force clearing of disk cache BTRFS info (device loop0): enabling auto defrag BTRFS info (device loop0): max_inline set to 0 BTRFS info (device loop0 state M): max_inline set to 0 loop0: detected capacity change from 32768 to 64 BTRFS info (device loop0 state M): cleaning free space cache v1 syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=10488, nr_sectors = 8 limit=64 BTRFS error (device loop0 state M): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=10496, nr_sectors = 8 limit=64 BTRFS error (device loop0 state M): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 BTRFS: error (device loop0 state M) in btrfs_commit_transaction:2554: errno=-5 IO failure (Error while writing out transaction) BTRFS warning (device loop0 state EM): Skipping commit of aborted transaction. BTRFS error (device loop0 state EMA): Transaction aborted (error -5) BTRFS: error (device loop0 state EMA) in cleanup_transaction:2036: errno=-5 IO failure BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page PGD 0 P4D 0 Oops: Oops: 0010 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0018:ffffc9000c587958 EFLAGS: 00010287 RAX: ffffffff81fbd4f4 RBX: 1ffffd40002b6398 RCX: 0000000000100000 RDX: ffffc90021082000 RSI: ffffea00015b1cc0 RDI: ffff888043cef700 RBP: ffffc9000c587a18 R08: ffffea00015b1cc7 R09: 1ffffd40002b6398 R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffea00015b1cc8 R14: ffffea00015b1cc0 R15: 1ffffd40002b6399 FS: 00007f2de1ccb6c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000000371bf000 CR4: 0000000000352ef0 Call Trace: filemap_read_folio+0x117/0x380 mm/filemap.c:2496 do_read_cache_folio+0x358/0x590 mm/filemap.c:4096 freader_get_folio+0x3c7/0x830 lib/buildid.c:58 freader_fetch+0xa3/0x750 lib/buildid.c:101 __build_id_parse+0x133/0x7d0 lib/buildid.c:289 do_procmap_query fs/proc/task_mmu.c:733 [inline] procfs_procmap_ioctl+0x76f/0xce0 fs/proc/task_mmu.c:813 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2de0d8f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2de1ccb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f2de0fe5fa0 RCX: 00007f2de0d8f7c9 RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000006 RBP: 00007f2de0e13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2de0fe6038 R14: 00007f2de0fe5fa0 R15: 00007ffd5a1d1238 Modules linked in: CR2: 0000000000000000 ---[ end trace 0000000000000000 ]--- RIP: 0010:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0018:ffffc9000c587958 EFLAGS: 00010287 RAX: ffffffff81fbd4f4 RBX: 1ffffd40002b6398 RCX: 0000000000100000 RDX: ffffc90021082000 RSI: ffffea00015b1cc0 RDI: ffff888043cef700 RBP: ffffc9000c587a18 R08: ffffea00015b1cc7 R09: 1ffffd40002b6398 R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffea00015b1cc8 R14: ffffea00015b1cc0 R15: 1ffffd40002b6399 FS: 00007f2de1ccb6c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000000371bf000 CR4: 0000000000352ef0