__dentry_kill+0x1d0/0x600 fs/dcache.c:603 dput.part.0+0x4b1/0x9b0 fs/dcache.c:845 dput+0x1f/0x30 fs/dcache.c:835 __fput+0x3bc/0xb80 fs/file_table.c:430 task_work_run+0x14e/0x250 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa7d/0x2c10 kernel/exit.c:877 do_group_exit+0xd3/0x2a0 kernel/exit.c:1026 __do_sys_exit_group kernel/exit.c:1037 [inline] __se_sys_exit_group kernel/exit.c:1035 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1035 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:1507! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 747 Comm: kworker/u8:5 Not tainted 6.9.0-syzkaller-09699-geb6a9339efeb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: writeback wb_workfn (flush-btrfs-157) RIP: 0010:folio_unlock mm/filemap.c:1507 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1502 Code: 33 d6 ce ff 48 89 ef 31 f6 e8 99 eb ff ff 5b 5d e9 22 d6 ce ff e8 1d d6 ce ff 48 c7 c6 60 8e 37 8b 48 89 ef e8 2e 4a 11 00 90 <0f> 0b 48 89 df e8 d3 bc 2a 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc9000381f1f0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88801f918000 RSI: ffffffff81bf1272 RDI: ffff88801f918444 RBP: ffffea0001528240 R08: 0000000000000001 R09: fffffbfff284be66 R10: ffffffff9425f337 R11: 0000000000000000 R12: ffff888069cb5628 R13: ffffea0001528240 R14: 00000000fffffffb R15: 00000000fffffffb FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff375cbdf8 CR3: 00000000555b6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __extent_writepage fs/btrfs/extent_io.c:1519 [inline] extent_write_cache_pages+0x10fd/0x1ce0 fs/btrfs/extent_io.c:2173 btrfs_writepages+0x21b/0x4a0 fs/btrfs/extent_io.c:2294 do_writepages+0x1a3/0x7f0 mm/page-writeback.c:2634 __writeback_single_inode+0x163/0xf90 fs/fs-writeback.c:1651 writeback_sb_inodes+0x611/0x1150 fs/fs-writeback.c:1947 wb_writeback+0x199/0xb50 fs/fs-writeback.c:2127 wb_do_writeback fs/fs-writeback.c:2274 [inline] wb_workfn+0x28d/0xf40 fs/fs-writeback.c:2314 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_unlock mm/filemap.c:1507 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1502 Code: 33 d6 ce ff 48 89 ef 31 f6 e8 99 eb ff ff 5b 5d e9 22 d6 ce ff e8 1d d6 ce ff 48 c7 c6 60 8e 37 8b 48 89 ef e8 2e 4a 11 00 90 <0f> 0b 48 89 df e8 d3 bc 2a 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc9000381f1f0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88801f918000 RSI: ffffffff81bf1272 RDI: ffff88801f918444 RBP: ffffea0001528240 R08: 0000000000000001 R09: fffffbfff284be66 R10: ffffffff9425f337 R11: 0000000000000000 R12: ffff888069cb5628 R13: ffffea0001528240 R14: 00000000fffffffb R15: 00000000fffffffb FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd03f17b038 CR3: 000000001e750000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400