tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465 exit_mmap+0x496/0xc20 mm/mmap.c:1681 __mmput+0x115/0x3b0 kernel/fork.c:1353 exit_mm+0x220/0x310 kernel/exit.c:570 do_exit+0x9b2/0x28e0 kernel/exit.c:925 do_group_exit+0x207/0x2c0 kernel/exit.c:1087 __do_sys_exit_group kernel/exit.c:1098 [inline] __se_sys_exit_group kernel/exit.c:1096 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1096 x64_sys_call+0x26a8/0x26b0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/page-writeback.c:3126! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 3532 Comm: kworker/u8:6 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: btrfs-delalloc btrfs_work_helper RIP: 0010:__folio_start_writeback+0xbae/0xc40 mm/page-writeback.c:3126 Code: 3d c4 ff 4c 89 f7 48 c7 c6 a0 be 13 8c e8 4a b5 0b 00 90 0f 0b e8 62 3d c4 ff 4c 89 f7 48 c7 c6 e0 ba 13 8c e8 33 b5 0b 00 90 <0f> 0b e8 4b 3d c4 ff 4c 89 f7 48 c7 c6 60 bf 13 8c e8 1c b5 0b 00 RSP: 0018:ffffc9000d6cf500 EFLAGS: 00010246 RAX: d2cd35b70a882100 RBX: 0000000000000002 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 RBP: ffffc9000d6cf670 R08: ffffffff9426d9af R09: 1ffffffff284db35 R10: dffffc0000000000 R11: fffffbfff284db36 R12: dffffc0000000000 R13: 1ffffd40003b7bb8 R14: ffffea0001dbddc0 R15: 1ffff92001ad9eac FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f959254d378 CR3: 000000007ba80000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_folio fs/btrfs/extent_io.c:187 [inline] __process_folios_contig+0x31c/0x540 fs/btrfs/extent_io.c:216 submit_one_async_extent fs/btrfs/inode.c:1229 [inline] submit_compressed_extents+0xde5/0x1630 fs/btrfs/inode.c:1632 run_ordered_work fs/btrfs/async-thread.c:245 [inline] btrfs_work_helper+0x56b/0xc40 fs/btrfs/async-thread.c:324 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__folio_start_writeback+0xbae/0xc40 mm/page-writeback.c:3126 Code: 3d c4 ff 4c 89 f7 48 c7 c6 a0 be 13 8c e8 4a b5 0b 00 90 0f 0b e8 62 3d c4 ff 4c 89 f7 48 c7 c6 e0 ba 13 8c e8 33 b5 0b 00 90 <0f> 0b e8 4b 3d c4 ff 4c 89 f7 48 c7 c6 60 bf 13 8c e8 1c b5 0b 00 RSP: 0018:ffffc9000d6cf500 EFLAGS: 00010246 RAX: d2cd35b70a882100 RBX: 0000000000000002 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 RBP: ffffc9000d6cf670 R08: ffffffff9426d9af R09: 1ffffffff284db35 R10: dffffc0000000000 R11: fffffbfff284db36 R12: dffffc0000000000 R13: 1ffffd40003b7bb8 R14: ffffea0001dbddc0 R15: 1ffff92001ad9eac FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005595810ad950 CR3: 0000000033916000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400