------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-tree.c:3274!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 22840 Comm: syz-executor.3 Not tainted 6.0.0-syzkaller-09423-g493ffd6605b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:btrfs_free_tree_block+0x9f9/0xa00 fs/btrfs/extent-tree.c:3274
Code: fe e9 b1 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c dd fb ff ff 48 89 df e8 76 a4 5d fe e9 d0 fb ff ff e8 4c c2 a9 06 e8 e7 39 0a fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49
RSP: 0018:ffffc90007ec7740 EFLAGS: 00010287
RAX: ffffffff837c4769 RBX: 00000000fffffff4 RCX: 0000000000040000
RDX: ffffc9000bad1000 RSI: 0000000000000954 RDI: 0000000000000955
RBP: ffffc90007ec7890 R08: ffffffff837c4125 R09: 0000000000000c40
R10: fffffbfff19820af R11: 1ffffffff19820ae R12: dffffc0000000000
R13: ffffc90007ec77c8 R14: ffffc90007ec77c0 R15: ffff8880724825d0
FS:  00007fab1ee4b700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab1ee4aff8 CR3: 000000009a5ef000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __btrfs_cow_block+0xe61/0x1770 fs/btrfs/ctree.c:467
 btrfs_cow_block+0x3d8/0x570 fs/btrfs/ctree.c:572
 btrfs_search_slot+0xc1b/0x2fe0
 btrfs_update_root+0xf0/0xc40 fs/btrfs/root-tree.c:132
 _btrfs_ioctl_set_received_subvol+0x98e/0x1040 fs/btrfs/ioctl.c:4867
 btrfs_ioctl_set_received_subvol+0x85/0xf0 fs/btrfs/ioctl.c:4951
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fab1dc8b5a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fab1ee4b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fab1ddabf80 RCX: 00007fab1dc8b5a9
RDX: 0000000020001140 RSI: 00000000c0c89425 RDI: 0000000000000003
RBP: 00007fab1ee4b1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007fffeb2adc0f R14: 00007fab1ee4b300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:btrfs_free_tree_block+0x9f9/0xa00 fs/btrfs/extent-tree.c:3274
Code: fe e9 b1 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c dd fb ff ff 48 89 df e8 76 a4 5d fe e9 d0 fb ff ff e8 4c c2 a9 06 e8 e7 39 0a fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49
RSP: 0018:ffffc90007ec7740 EFLAGS: 00010287
RAX: ffffffff837c4769 RBX: 00000000fffffff4 RCX: 0000000000040000
RDX: ffffc9000bad1000 RSI: 0000000000000954 RDI: 0000000000000955
RBP: ffffc90007ec7890 R08: ffffffff837c4125 R09: 0000000000000c40
R10: fffffbfff19820af R11: 1ffffffff19820ae R12: dffffc0000000000
R13: ffffc90007ec77c8 R14: ffffc90007ec77c0 R15: ffff8880724825d0
FS:  00007fab1ee4b700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a9cbc7ec78 CR3: 000000009a5ef000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400