------------[ cut here ]------------ WARNING: CPU: 1 PID: 20287 at fs/xfs/libxfs/xfs_bmap.c:4599 xfs_bmapi_convert_delalloc+0xfc4/0x1310 Modules linked in: CPU: 1 PID: 20287 Comm: syz-executor.2 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 RIP: 0010:xfs_bmapi_convert_delalloc+0xfc4/0x1310 fs/xfs/libxfs/xfs_bmap.c:4599 Code: 82 12 6c fe 0f 0b e9 42 f4 ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 f2 ff ff 48 89 df e8 b6 8e c6 fe e9 05 f2 ff ff e8 5c 12 6c fe <0f> 0b 41 bd e4 ff ff ff e9 a1 fa ff ff 89 f9 80 e1 07 38 c1 0f 8c RSP: 0018:ffffc9000322e860 EFLAGS: 00010287 RAX: ffffffff8321f734 RBX: ffffffffffffffff RCX: 0000000000040000 RDX: ffffc90005a22000 RSI: 0000000000037305 RDI: 0000000000037306 RBP: ffffc9000322ea90 R08: ffffffff8321f15a R09: 1ffffffff1d34645 R10: dffffc0000000000 R11: fffffbfff1d34646 R12: ffffc9000322e9a0 R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000645d20 FS: 00007f518b1836c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f096c798000 CR3: 0000000039616000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: xfs_convert_blocks fs/xfs/xfs_aops.c:266 [inline] xfs_map_blocks+0x780/0x1090 fs/xfs/xfs_aops.c:389 iomap_writepage_map fs/iomap/buffered-io.c:1800 [inline] iomap_do_writepage+0xb4a/0x32a0 fs/iomap/buffered-io.c:1968 write_cache_pages+0x827/0x13f0 mm/page-writeback.c:2474 iomap_writepages+0x68/0x240 fs/iomap/buffered-io.c:1985 xfs_vm_writepages+0x139/0x1a0 fs/xfs/xfs_aops.c:513 do_writepages+0x3a6/0x670 mm/page-writeback.c:2553 filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:390 __filemap_fdatawrite_range mm/filemap.c:423 [inline] filemap_write_and_wait_range+0x1d4/0x2c0 mm/filemap.c:678 __iomap_dio_rw+0xb1b/0x2370 fs/iomap/direct-io.c:592 iomap_dio_rw+0x46/0xa0 fs/iomap/direct-io.c:748 xfs_file_dio_read+0x24c/0x410 fs/xfs/xfs_file.c:235 xfs_file_read_iter+0x29a/0x4d0 fs/xfs/xfs_file.c:300 call_read_iter include/linux/fs.h:1950 [inline] copy_splice_read+0x4c9/0x9c0 fs/splice.c:364 splice_direct_to_actor+0x2c4/0x9e0 fs/splice.c:1069 do_splice_direct+0x2ac/0x3f0 fs/splice.c:1194 do_sendfile+0x623/0x1070 fs/read_write.c:1254 __do_sys_sendfile64 fs/read_write.c:1322 [inline] __se_sys_sendfile64+0x17c/0x1e0 fs/read_write.c:1308 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f518a47cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f518b1830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f518a59bf80 RCX: 00007f518a47cae9 RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 RBP: 00007f518a4c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f518a59bf80 R15: 00007ffc4228bdf8